[Git][security-tracker-team/security-tracker][master] freerdp3 issues CVEfied

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
611022b6 by Moritz Muehlenhoff at 2026-10-15T10:40:42+02:00
freerdp3 issues CVEfied

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -230,18 +230,6 @@ CVE-2026-110841 (n8n before 2.41.4 and 2.42.0 contains an authorization bypass i
 	NOT-FOR-US: n8n
 CVE-2026-110840 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection v ...)
 	NOT-FOR-US: n8n
-CVE-2026-110839 (FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON ...)
-	TODO: check
-CVE-2026-110838 (FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs d ...)
-	TODO: check
-CVE-2026-110837 (FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP ...)
-	TODO: check
-CVE-2026-110836 (FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerabili ...)
-	TODO: check
-CVE-2026-110835 (FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy  ...)
-	TODO: check
-CVE-2026-110834 (FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference v ...)
-	TODO: check
 CVE-2026-110833 (FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or  ...)
 	TODO: check
 CVE-2026-110832 (FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerab ...)
@@ -31439,19 +31427,19 @@ CVE-2026-XXXX [GHSA-pjxv-5j98-cqx4]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjxv-5j98-cqx4
-CVE-2026-XXXX [GHSA-pw4j-ff39-9vjm]
+CVE-2026-110834 (FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference v ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pw4j-ff39-9vjm
-CVE-2026-XXXX [GHSA-87v8-2gwr-ww9j]
+CVE-2026-110835 (FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy  ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-87v8-2gwr-ww9j
-CVE-2026-XXXX [GHSA-h7fx-22wv-4cg8]
+CVE-2026-110836 (FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerabili ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h7fx-22wv-4cg8
-CVE-2026-XXXX [GHSA-52xc-5973-w5vv]
+CVE-2026-110837 (FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv
@@ -31471,11 +31459,11 @@ CVE-2026-XXXX [GHSA-cmgx-558f-vh67]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cmgx-558f-vh67
-CVE-2026-XXXX [GHSA-m998-cvfm-9444]
+CVE-2026-110838 (FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs d ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m998-cvfm-9444
-CVE-2026-XXXX [GHSA-99p4-8j24-wvj4]
+CVE-2026-110839 (FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/611022b602bf21e79b83a622cd01929eb60f45d5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/611022b602bf21e79b83a622cd01929eb60f45d5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/b9a5ef33/attachment-0001.htm>