[Git][security-tracker-team/security-tracker][master] Add new batch of freerdp3 issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Aug 1 21:31:00 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1afaaa17 by Salvatore Bonaccorso at 2026-08-01T22:30:34+02:00
Add new batch of freerdp3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -117,47 +117,89 @@ CVE-2026-67308 (Wazuh workflows before 44bf114 contain a shell injection vulnera
 CVE-2026-67307 (Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override ...)
 	NOT-FOR-US: Wazuh
 CVE-2026-67306 (FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vuln ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3
 CVE-2026-67305 (FreeRDP Windows client before 3.29.0 contains a heap buffer overflow v ...)
-	TODO: check
+	- freerdp3 <not-affected> (Only affects the FreeRDP Windows client)
+	- freerdp2 <not-affected> (Only affects the FreeRDP Windows client)
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cj9v-h4hq-29jr
 CVE-2026-67304 (FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5
 CVE-2026-67303 (FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(Out ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pfxq-3qmw-8vjx
 CVE-2026-67302 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide- ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v89x-pc32-hqr7
 CVE-2026-67301 (FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in t ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w
 CVE-2026-67300 (FreeRDP before 3.29.0 contains client-side heap use-after-free vulnera ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-33gg-h66j-3697
 CVE-2026-67299 (FreeRDP before 3.29.0 contains a client-side heap use-after-free in th ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-33gg-h66j-3697
 CVE-2026-67298 (FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in  ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv
 CVE-2026-67297 (FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when pr ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m
 CVE-2026-67296 (FreeRDP before 3.29.0 contains a denial of service vulnerability in th ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v
 CVE-2026-67295 (FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8xqm-wp3f-rfp9
 CVE-2026-67294 (FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-89c6-jjrw-96h4
 CVE-2026-67293 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improp ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5wr6-8m8j-3h7f
 CVE-2026-67292 (FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability  ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8v6m-2cmc-chx9
 CVE-2026-67291 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap ou ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6
 CVE-2026-67290 (FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whq8-c3v3-p8v8
 CVE-2026-67289 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate  ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mwwh-mhp9-q7vm
 CVE-2026-67288 (FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
 CVE-2026-66402 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple  ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-43hh-p3vw-hfx3
 CVE-2026-66401 (FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerabilit ...)
-	TODO: check
+	- freerdp3 3.29.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg
 CVE-2026-55735 (Improper Verification of Cryptographic Signature in ueberauth guardian ...)
 	NOT-FOR-US: ueberauth guardian
 CVE-2026-55734 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1afaaa17e8f7e1f40f1c739cd49adf18a79250f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1afaaa17e8f7e1f40f1c739cd49adf18a79250f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260801/1cc9c5c9/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list