[Git][security-tracker-team/security-tracker][master] Add new CVEs assigned for FreeRDP

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa372cf2 by Salvatore Bonaccorso at 2026-11-04T20:47:59+01:00
Add new CVEs assigned for FreeRDP

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -114,16 +114,6 @@ CVE-2026-121966 (Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardA
 	TODO: check
 CVE-2026-121965 (Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a ...)
 	TODO: check
-CVE-2026-121964 (FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD  ...)
-	TODO: check
-CVE-2026-121963 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in the a ...)
-	TODO: check
-CVE-2026-121962 (FreeRDP before 3.32.2 contains a heap buffer overflow in transport_def ...)
-	TODO: check
-CVE-2026-121961 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in the f ...)
-	TODO: check
-CVE-2026-121960 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
-	TODO: check
 CVE-2026-121959 (FreeRDP before 3.32.2 contains an infinite loop vulnerability in webso ...)
 	TODO: check
 CVE-2026-121958 (FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX cl ...)
@@ -38157,11 +38147,11 @@ CVE-2026-121407 (FreeRDP before 3.32.2 contains a denial of service vulnerabilit
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x8vp-ff7m-294g
-CVE-2026-XXXX [GHSA-3pg4-5r42-wxvj]
+CVE-2026-121960 [GHSA-3pg4-5r42-wxvj]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3pg4-5r42-wxvj
-CVE-2026-XXXX [GHSA-qw7w-hhxq-763c]
+CVE-2026-121961 [GHSA-qw7w-hhxq-763c]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qw7w-hhxq-763c
@@ -38173,7 +38163,7 @@ CVE-2026-121409 (FreeRDP before 3.32.2 contains a denial of service vulnerabilit
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3hf9-w6hr-hf9j
-CVE-2026-XXXX [GHSA-j536-qc58-pmf8]
+CVE-2026-121962 [GHSA-j536-qc58-pmf8]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j536-qc58-pmf8
@@ -38181,7 +38171,7 @@ CVE-2026-121410 (FreeRDP before 3.32.2 contains a denial of service vulnerabilit
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqw6-jf2h-6fj6
-CVE-2026-XXXX [GHSA-cx9c-q4jc-wm6c]
+CVE-2026-121963 [GHSA-cx9c-q4jc-wm6c]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cx9c-q4jc-wm6c
@@ -38193,7 +38183,7 @@ CVE-2026-XXXX [GHSA-jqf4-4p68-4p43]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jqf4-4p68-4p43
-CVE-2026-XXXX [GHSA-q82v-5wjg-6h57]
+CVE-2026-121964 [GHSA-q82v-5wjg-6h57]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q82v-5wjg-6h57



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa372cf246a2c5053738f123f01e945e93406e74

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa372cf246a2c5053738f123f01e945e93406e74
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/0ee31966/attachment.htm>