[Git][security-tracker-team/security-tracker][master] freerdp3 issues CVEfied
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Oct 14 00:22:08 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
be241278 by Moritz Muehlenhoff at 2026-10-14T01:21:31+02:00
freerdp3 issues CVEfied
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -523,37 +523,69 @@ CVE-2026-109955 (Hono from 4.12.4 before 4.13.11 contains a middleware bypass vu
CVE-2026-109954 (Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 share ...)
NOT-FOR-US: Parse Server
CVE-2026-109953 (FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected crede ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh
CVE-2026-109952 (The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selecte ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qq23-mqmv-pc65
CVE-2026-109951 (FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerab ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g4wg-67xq-8q53
CVE-2026-109950 (FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vu ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v
CVE-2026-109949 (FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excess ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-chh2-527f-x255
CVE-2026-109948 (FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disc ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f554-v4xw-5j39
CVE-2026-109947 (FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource al ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q56j-jjh6-38jf
CVE-2026-109946 (FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-97pf-pwp3-2wrv
CVE-2026-109945 (FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerabili ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rpr-jjjg-5qv6
CVE-2026-109944 (FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_ ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f526-rq4j-5ch8
CVE-2026-109943 (FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's as ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pg3f-chj4-mrw6
CVE-2026-109942 (FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_ ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f46f-pxh9-w2rh
CVE-2026-109941 (FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerabili ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7vfc-chg9-q5r8
CVE-2026-109940 (FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g8jw-gv54-r94p
CVE-2026-109939 (FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in up ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cq4m-gwc5-w8rc
CVE-2026-109938 (Positive mapped-video coordinates overflow and abort FreeRDP clients A ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-96rv-gf42-7wq9
CVE-2026-109898 (Missing Authorization vulnerability in Arraytics WP Event Solution wp- ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-109896 (Missing Authorization vulnerability in WP Chill Download Monitor integ ...)
@@ -585,11 +617,17 @@ CVE-2026-109687 (Improper Neutralization of Special Elements used in an SQL Comm
CVE-2026-109684 (Missing Authorization vulnerability in TMS Amelia ameliabooking allows ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-109680 (FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in f ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4ww8-3vqm-jgcf
CVE-2026-109679 (FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qjwp-c855-hc69
CVE-2026-109678 (FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR asser ...)
- TODO: check
+ - freerdp3 3.32.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-996j-34w6-5hgm
CVE-2026-109677 (FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read ...)
TODO: check
CVE-2026-109676 (FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulne ...)
@@ -25701,34 +25739,14 @@ CVE-2026-XXXX [GHSA-h7fx-22wv-4cg8]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h7fx-22wv-4cg8
-CVE-2026-XXXX [GHSA-996j-34w6-5hgm]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-996j-34w6-5hgm
CVE-2026-XXXX [GHSA-52xc-5973-w5vv]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv
-CVE-2026-XXXX [GHSA-qjwp-c855-hc69]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qjwp-c855-hc69
-CVE-2026-XXXX [GHSA-4ww8-3vqm-jgcf]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4ww8-3vqm-jgcf
-CVE-2026-XXXX [GHSA-96rv-gf42-7wq9]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-96rv-gf42-7wq9
CVE-2026-XXXX [GHSA-9qr4-rgq4-jfp8]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qr4-rgq4-jfp8
-CVE-2026-XXXX [GHSA-cq4m-gwc5-w8rc]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cq4m-gwc5-w8rc
CVE-2026-109243 (FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assi ...)
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
@@ -25737,30 +25755,6 @@ CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure permissio
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4
-CVE-2026-XXXX [GHSA-g8jw-gv54-r94p]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g8jw-gv54-r94p
-CVE-2026-XXXX [GHSA-7vfc-chg9-q5r8]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7vfc-chg9-q5r8
-CVE-2026-XXXX [GHSA-f46f-pxh9-w2rh]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f46f-pxh9-w2rh
-CVE-2026-XXXX [GHSA-pg3f-chj4-mrw6]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pg3f-chj4-mrw6
-CVE-2026-XXXX [GHSA-f526-rq4j-5ch8]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f526-rq4j-5ch8
-CVE-2026-XXXX [GHSA-8rpr-jjjg-5qv6]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rpr-jjjg-5qv6
CVE-2026-XXXX [GHSA-cmgx-558f-vh67]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
@@ -25773,10 +25767,6 @@ CVE-2026-XXXX [GHSA-99p4-8j24-wvj4]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4
-CVE-2026-XXXX [GHSA-97pf-pwp3-2wrv]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-97pf-pwp3-2wrv
CVE-2026-XXXX [GHSA-27m7-gwhh-6hhf]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
@@ -25785,30 +25775,6 @@ CVE-2026-XXXX [GHSA-qpfh-m9w6-xf2x]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x
-CVE-2026-XXXX [GHSA-q56j-jjh6-38jf]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q56j-jjh6-38jf
-CVE-2026-XXXX [GHSA-f554-v4xw-5j39]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f554-v4xw-5j39
-CVE-2026-XXXX [GHSA-chh2-527f-x255]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-chh2-527f-x255
-CVE-2026-XXXX [GHSA-xf45-j844-588v]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v
-CVE-2026-XXXX [GHSA-qq23-mqmv-pc65]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qq23-mqmv-pc65
-CVE-2026-XXXX [GHSA-jhxw-3hj9-9hqh]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh
CVE-2026-109245 (FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validatio ...)
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
@@ -25861,10 +25827,6 @@ CVE-2026-109257 (FreeRDP before 3.32.0 contains a double-free vulnerability in n
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2hhg-8xx6-v73w
-CVE-2026-XXXX [GHSA-g4wg-67xq-8q53]
- - freerdp3 3.32.0+dfsg-1
- - freerdp2 <removed>
- NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g4wg-67xq-8q53
CVE-2026-XXXX [GHSA-72qv-gcph-rfwf]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be24127858eef4122dbd030d51f745237212addf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be24127858eef4122dbd030d51f745237212addf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/e9ef6cfb/attachment.htm>
More information about the debian-security-tracker-commits
mailing list