[Git][security-tracker-team/security-tracker][master] Add one freerdp3 issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1a297e75 by Salvatore Bonaccorso at 2026-07-21T09:54:06+02:00
Add one freerdp3 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,11 @@ CVE-2026-64626 (AVideo versions from commit 0dbadbca through latest master conta
 CVE-2026-64625 (AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-64624 (FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP ...)
-	TODO: check
+	- freerdp3 <unfixed> (unimportant)
+	- freerdp2 <removed> (unimportant)
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rq8f-9xjh-pr3m
+	NOTE: With 3.28.0 the option has been disabled by default, issue when handling
+	NOTE: an untrusted .rdp file
 CVE-2026-64619 (FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in t ...)
 	NOT-FOR-US: FileCodeBox
 CVE-2026-63771 (Adminer before 5.4.3 contains a cookie injection vulnerability that al ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a297e7530ac72e3af6fb9646e030d858b97633f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a297e7530ac72e3af6fb9646e030d858b97633f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260721/6163cc05/attachment.htm>