[Git][security-tracker-team/security-tracker][master] Move CVEs assigned for FreeRDP issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Nov 4 19:54:04 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4605cc62 by Salvatore Bonaccorso at 2026-11-04T20:53:33+01:00
Move CVEs assigned for FreeRDP issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -114,26 +114,6 @@ CVE-2026-121966 (Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardA
 	TODO: check
 CVE-2026-121965 (Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a ...)
 	TODO: check
-CVE-2026-121959 (FreeRDP before 3.32.2 contains an infinite loop vulnerability in webso ...)
-	TODO: check
-CVE-2026-121958 (FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX cl ...)
-	TODO: check
-CVE-2026-121957 (FreeRDP before 3.32.2 contains a use-after-free vulnerability that all ...)
-	TODO: check
-CVE-2026-121956 (FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSP ...)
-	TODO: check
-CVE-2026-121955 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emula ...)
-	TODO: check
-CVE-2026-121954 (FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar cod ...)
-	TODO: check
-CVE-2026-121953 (FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dyna ...)
-	TODO: check
-CVE-2026-121952 (FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because  ...)
-	TODO: check
-CVE-2026-121951 (FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips t ...)
-	TODO: check
-CVE-2026-121950 (FreeRDP before 3.32.2 does not check the product of surface dimensions ...)
-	TODO: check
 CVE-2026-121946 (zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a ...)
 	TODO: check
 CVE-2026-121945 (CoopCycle coopcycle-web before 6.20.1 contains a broken access control ...)
@@ -38031,7 +38011,7 @@ CVE-2026-121387 (FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vuln
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wg7g-gx9g-r96c
-CVE-2026-XXXX [GHSA-f53w-3364-jr35]
+CVE-2026-121950 [GHSA-f53w-3364-jr35]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f53w-3364-jr35
@@ -38063,7 +38043,7 @@ CVE-2026-121396 (FreeRDP clients from 3.0.0 before 3.32.2 built with verbose Win
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6p3w-fv52-cf24
-CVE-2026-XXXX [GHSA-4qq4-qwxq-49m8]
+CVE-2026-121951 [GHSA-4qq4-qwxq-49m8]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qq4-qwxq-49m8
@@ -38087,7 +38067,7 @@ CVE-2026-121401 (FreeRDP before 3.32.2 contains a denial of service vulnerabilit
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m
-CVE-2026-XXXX [GHSA-xc85-4mqc-xgcx]
+CVE-2026-121952 [GHSA-xc85-4mqc-xgcx]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xc85-4mqc-xgcx
@@ -38095,31 +38075,31 @@ CVE-2026-XXXX [GHSA-v85m-wg84-5ffh]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v85m-wg84-5ffh
-CVE-2026-XXXX [GHSA-6wqx-rv3q-vcxp]
+CVE-2026-121953 [GHSA-6wqx-rv3q-vcxp]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6wqx-rv3q-vcxp
-CVE-2026-XXXX [GHSA-fg78-v8j5-8697]
+CVE-2026-121954 [GHSA-fg78-v8j5-8697]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg78-v8j5-8697
-CVE-2026-XXXX [GHSA-983v-jp34-f3fm]
+CVE-2026-121955 [GHSA-983v-jp34-f3fm]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-983v-jp34-f3fm
-CVE-2026-XXXX [GHSA-2557-79qc-6gfr]
+CVE-2026-121956 [GHSA-2557-79qc-6gfr]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2557-79qc-6gfr
-CVE-2026-XXXX [GHSA-xjhw-2r55-m95g]
+CVE-2026-121957 [GHSA-xjhw-2r55-m95g]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g
-CVE-2026-XXXX [GHSA-m59q-wm7v-mp57]
+CVE-2026-121958 [GHSA-m59q-wm7v-mp57]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m59q-wm7v-mp57
-CVE-2026-XXXX [GHSA-x26g-fp9v-c2pg]
+CVE-2026-121959 [GHSA-x26g-fp9v-c2pg]
 	- freerdp3 3.32.2+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x26g-fp9v-c2pg



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4605cc622211aa67d9ee86e64dd29f05c2d69fc7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4605cc622211aa67d9ee86e64dd29f05c2d69fc7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/0918c697/attachment.htm>

More information about the debian-security-tracker-commits mailing list