[Git][security-tracker-team/security-tracker][master] More FreeRDP issues assigned
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 12 20:40:35 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7ee05ecd by Salvatore Bonaccorso at 2026-10-12T21:40:02+02:00
More FreeRDP issues assigned
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -376,30 +376,6 @@ CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a
TODO: check
CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free v ...)
TODO: check
-CVE-2026-109257 (FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_cont ...)
- TODO: check
-CVE-2026-109256 (FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the W ...)
- TODO: check
-CVE-2026-109255 (FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerabili ...)
- TODO: check
-CVE-2026-109254 (FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in ...)
- TODO: check
-CVE-2026-109253 (FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulner ...)
- TODO: check
-CVE-2026-109252 (FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference v ...)
- TODO: check
-CVE-2026-109251 (FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geom ...)
- TODO: check
-CVE-2026-109250 (FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerabil ...)
- TODO: check
-CVE-2026-109249 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in free ...)
- TODO: check
-CVE-2026-109248 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the ...)
- TODO: check
-CVE-2026-109247 (FreeRDP before 3.32.0 contains a path traversal vulnerability in conve ...)
- TODO: check
-CVE-2026-109246 (FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the f ...)
- TODO: check
CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request forgery vul ...)
TODO: check
CVE-2026-109238 (Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vul ...)
@@ -23710,27 +23686,27 @@ CVE-2026-109245 [GHSA-h44v-39x6-9xvg]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h44v-39x6-9xvg
-CVE-2026-XXXX [GHSA-6vjv-4hm3-6698]
+CVE-2026-109246 [GHSA-6vjv-4hm3-6698]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6vjv-4hm3-6698
-CVE-2026-XXXX [GHSA-c3rh-2hv6-7hf2]
+CVE-2026-109247 [GHSA-c3rh-2hv6-7hf2]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3rh-2hv6-7hf2
-CVE-2026-XXXX [GHSA-jp2r-gm4v-wvq2]
+CVE-2026-109248 [GHSA-jp2r-gm4v-wvq2]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jp2r-gm4v-wvq2
-CVE-2026-XXXX [GHSA-gvq8-v2fm-ffxv]
+CVE-2026-109249 [GHSA-gvq8-v2fm-ffxv]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gvq8-v2fm-ffxv
-CVE-2026-XXXX [GHSA-jhv5-m83m-hxhq]
+CVE-2026-109250 [GHSA-jhv5-m83m-hxhq]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhv5-m83m-hxhq
-CVE-2026-XXXX [GHSA-grvc-qhhp-7h6m]
+CVE-2026-109251 [GHSA-grvc-qhhp-7h6m]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-grvc-qhhp-7h6m
@@ -23742,19 +23718,19 @@ CVE-2026-XXXX [GHSA-945c-qq5h-jqwp]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-945c-qq5h-jqwp
-CVE-2026-XXXX [GHSA-93g7-296p-j77j]
+CVE-2026-109252 [GHSA-93g7-296p-j77j]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-93g7-296p-j77j
-CVE-2026-XXXX [GHSA-6rj3-rf6g-3vw5]
+CVE-2026-109253 [GHSA-6rj3-rf6g-3vw5]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6rj3-rf6g-3vw5
-CVE-2026-XXXX [GHSA-wf3x-658c-52m5]
+CVE-2026-109256 [GHSA-wf3x-658c-52m5]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wf3x-658c-52m5
-CVE-2026-XXXX [GHSA-2hhg-8xx6-v73w]
+CVE-2026-109257 [GHSA-2hhg-8xx6-v73w]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2hhg-8xx6-v73w
@@ -23766,11 +23742,11 @@ CVE-2026-XXXX [GHSA-72qv-gcph-rfwf]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72qv-gcph-rfwf
-CVE-2026-XXXX [GHSA-vqxm-9w7c-hvvx]
+CVE-2026-109254 [GHSA-vqxm-9w7c-hvvx]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vqxm-9w7c-hvvx
-CVE-2026-XXXX [GHSA-hxw3-57rq-3v4m]
+CVE-2026-109255 [GHSA-hxw3-57rq-3v4m]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hxw3-57rq-3v4m
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ee05ecd244a8fea29ed39d7a3d2a92907e0b6e0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ee05ecd244a8fea29ed39d7a3d2a92907e0b6e0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/0e436436/attachment.htm>
More information about the debian-security-tracker-commits
mailing list