[Git][security-tracker-team/security-tracker][master] Track first batch of now assigned freerdp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ece87c76 by Salvatore Bonaccorso at 2026-10-12T21:30:35+02:00
Track first batch of now assigned freerdp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -400,18 +400,6 @@ CVE-2026-109247 (FreeRDP before 3.32.0 contains a path traversal vulnerability i
 	TODO: check
 CVE-2026-109246 (FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the f ...)
 	TODO: check
-CVE-2026-109245 (FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validatio ...)
-	TODO: check
-CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulne ...)
-	TODO: check
-CVE-2026-109243 (FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assi ...)
-	TODO: check
-CVE-2026-109242 (FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized hea ...)
-	TODO: check
-CVE-2026-109241 (FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerabilit ...)
-	TODO: check
-CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerabil ...)
-	TODO: check
 CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request forgery vul ...)
 	TODO: check
 CVE-2026-109238 (Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vul ...)
@@ -17122,7 +17110,7 @@ CVE-2026-103111 (PCRE2 before 10.49, when there is an attacker-controlled regula
 	- pcre2 10.48-3.1 (bug #1149217)
 	NOTE: https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
 	NOTE: Fixed by: https://github.com/PCRE2Project/pcre2/commit/2b4038298072684b0fae29b15bedfb1a75bda46d (pcre2-10.49)
-CVE-2026-XXXX [GHSA-9qqc-m43j-g4r2]
+CVE-2026-109240 [GHSA-9qqc-m43j-g4r2]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qqc-m43j-g4r2
@@ -23638,11 +23626,11 @@ CVE-2026-XXXX [GHSA-cq4m-gwc5-w8rc]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cq4m-gwc5-w8rc
-CVE-2026-XXXX [GHSA-q9p9-j22r-577p]
+CVE-2026-109243 [GHSA-q9p9-j22r-577p]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9p9-j22r-577p
-CVE-2026-XXXX [GHSA-2jfv-j3wx-5cg4]
+CVE-2026-109244 [GHSA-2jfv-j3wx-5cg4]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4
@@ -23718,7 +23706,7 @@ CVE-2026-XXXX [GHSA-jhxw-3hj9-9hqh]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh
-CVE-2026-XXXX [GHSA-h44v-39x6-9xvg]
+CVE-2026-109245 [GHSA-h44v-39x6-9xvg]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h44v-39x6-9xvg
@@ -23790,11 +23778,11 @@ CVE-2026-XXXX [GHSA-f4pf-pgp4-f2r3]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f4pf-pgp4-f2r3
-CVE-2026-XXXX [GHSA-4mpr-hmqx-83q8]
+CVE-2026-109242 [GHSA-4mpr-hmqx-83q8]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4mpr-hmqx-83q8
-CVE-2026-XXXX [GHSA-x7v7-9jp5-wqj2]
+CVE-2026-109241 [GHSA-x7v7-9jp5-wqj2]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ece87c764d319f885b0aad6a1f7ada9cd952c239

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ece87c764d319f885b0aad6a1f7ada9cd952c239
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/c23792ce/attachment.htm>