[Git][security-tracker-team/security-tracker][master] Add new batch of freerdp3 issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Aug 1 21:31:00 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1afaaa17 by Salvatore Bonaccorso at 2026-08-01T22:30:34+02:00
Add new batch of freerdp3 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -117,47 +117,89 @@ CVE-2026-67308 (Wazuh workflows before 44bf114 contain a shell injection vulnera
CVE-2026-67307 (Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override ...)
NOT-FOR-US: Wazuh
CVE-2026-67306 (FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vuln ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3
CVE-2026-67305 (FreeRDP Windows client before 3.29.0 contains a heap buffer overflow v ...)
- TODO: check
+ - freerdp3 <not-affected> (Only affects the FreeRDP Windows client)
+ - freerdp2 <not-affected> (Only affects the FreeRDP Windows client)
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cj9v-h4hq-29jr
CVE-2026-67304 (FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5
CVE-2026-67303 (FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(Out ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pfxq-3qmw-8vjx
CVE-2026-67302 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide- ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v89x-pc32-hqr7
CVE-2026-67301 (FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in t ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w
CVE-2026-67300 (FreeRDP before 3.29.0 contains client-side heap use-after-free vulnera ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-33gg-h66j-3697
CVE-2026-67299 (FreeRDP before 3.29.0 contains a client-side heap use-after-free in th ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-33gg-h66j-3697
CVE-2026-67298 (FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv
CVE-2026-67297 (FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when pr ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m
CVE-2026-67296 (FreeRDP before 3.29.0 contains a denial of service vulnerability in th ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v
CVE-2026-67295 (FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8xqm-wp3f-rfp9
CVE-2026-67294 (FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-89c6-jjrw-96h4
CVE-2026-67293 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improp ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5wr6-8m8j-3h7f
CVE-2026-67292 (FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8v6m-2cmc-chx9
CVE-2026-67291 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap ou ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6
CVE-2026-67290 (FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whq8-c3v3-p8v8
CVE-2026-67289 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mwwh-mhp9-q7vm
CVE-2026-67288 (FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
CVE-2026-66402 (FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-43hh-p3vw-hfx3
CVE-2026-66401 (FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerabilit ...)
- TODO: check
+ - freerdp3 3.29.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg
CVE-2026-55735 (Improper Verification of Cryptographic Signature in ueberauth guardian ...)
NOT-FOR-US: ueberauth guardian
CVE-2026-55734 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1afaaa17e8f7e1f40f1c739cd49adf18a79250f7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1afaaa17e8f7e1f40f1c739cd49adf18a79250f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260801/1cc9c5c9/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list