[Git][security-tracker-team/security-tracker][master] Add another batch of freerdp3 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
301e5027 by Salvatore Bonaccorso at 2026-11-03T09:13:17+01:00
Add another batch of freerdp3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -35621,10 +35621,58 @@ CVE-2026-103060 (Improper Limitation of a Pathname to a Restricted Directory ('P
 	NOTE: Fixed by: https://github.com/erlang/rebar3/commit/e35282b26e499b1d9e8f30bba9dccd71cd8b02ba (3.27.2)
 CVE-2026-102663 (OpenList is a file list program that supports multiple storage backend ...)
 	NOT-FOR-US: OpenList
+CVE-2026-XXXX [GHSA-hhfh-fvm7-7w65]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hhfh-fvm7-7w65
+CVE-2026-XXXX [GHSA-pq35-c472-69w2]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pq35-c472-69w2
+CVE-2026-XXXX [GHSA-v7hr-xh82-79p7]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v7hr-xh82-79p7
+CVE-2026-XXXX [GHSA-9r9q-9r7p-4mr6]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9r9q-9r7p-4mr6
+CVE-2026-XXXX [GHSA-76c4-7552-ffhv]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-76c4-7552-ffhv
+CVE-2026-XXXX [GHSA-j5pq-cm28-qm6v]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j5pq-cm28-qm6v
+CVE-2026-XXXX [GHSA-2hm9-2h5q-x525]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2hm9-2h5q-x525
+CVE-2026-XXXX [GHSA-hj6g-r86h-wrcg]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hj6g-r86h-wrcg
+CVE-2026-XXXX [GHSA-fw6x-h8gw-778w]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fw6x-h8gw-778w
+CVE-2026-XXXX [GHSA-q8p6-8mmj-j4ph]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q8p6-8mmj-j4ph
+CVE-2026-XXXX [GHSA-r664-f94r-rgg6]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r664-f94r-rgg6
 CVE-2026-XXXX [GHSA-4g67-jhpc-q5xp]
-	- freerdp3 3.32.2+dfsg-1
+	- freerdp3 3.33.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g67-jhpc-q5xp
+CVE-2026-XXXX [GHSA-8m87-jj8p-2fqc]
+	- freerdp3 3.33.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m87-jj8p-2fqc
 CVE-2026-XXXX [GHSA-799q-hjgw-g55g]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301e502741c054087d041f6d90d4846b36c6c967

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301e502741c054087d041f6d90d4846b36c6c967
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/3d9ffe68/attachment-0001.htm>