[Git][security-tracker-team/security-tracker][master] freerdp3 CVEfied

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d5a0fec by Moritz Muehlenhoff at 2026-10-15T11:13:21+02:00
freerdp3 CVEfied

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -230,16 +230,6 @@ CVE-2026-110841 (n8n before 2.41.4 and 2.42.0 contains an authorization bypass i
 	NOT-FOR-US: n8n
 CVE-2026-110840 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection v ...)
 	NOT-FOR-US: n8n
-CVE-2026-110833 (FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or  ...)
-	TODO: check
-CVE-2026-110832 (FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerab ...)
-	TODO: check
-CVE-2026-110831 (FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention fla ...)
-	TODO: check
-CVE-2026-110830 (FreeRDP before 3.32.0 fails to close prior serial handles in serial_pr ...)
-	TODO: check
-CVE-2026-110829 (FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer deref ...)
-	TODO: check
 CVE-2026-110816 (### Summary    `qs.stringify` with `arrayFormat: 'comma'` throws `Type ...)
 	TODO: check
 CVE-2026-110810 (A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This ...)
@@ -31414,11 +31404,11 @@ CVE-2026-XXXX [GHSA-xm53-352c-57jw]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw
-CVE-2026-XXXX [GHSA-3mq5-xh88-9v62]
+CVE-2026-110829 (FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer deref ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mq5-xh88-9v62
-CVE-2026-XXXX [GHSA-mqxv-c882-m8w9]
+CVE-2026-110830 (FreeRDP before 3.32.0 fails to close prior serial handles in serial_pr ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9
@@ -31426,15 +31416,15 @@ CVE-2026-XXXX [GHSA-q6pp-28g8-xqjc]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjc
-CVE-2026-XXXX [GHSA-jgw9-wqvx-j495]
+CVE-2026-110831 (FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention fla ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jgw9-wqvx-j495
-CVE-2026-XXXX [GHSA-5cgr-vmp8-fmvj]
+CVE-2026-110832 (FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerab ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5cgr-vmp8-fmvj
-CVE-2026-XXXX [GHSA-m7g5-gw57-cwcr]
+CVE-2026-110833 (FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or  ...)
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7g5-gw57-cwcr



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d5a0fecf66912317c8013fe4eb1e91cbde296fe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d5a0fecf66912317c8013fe4eb1e91cbde296fe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/663ac798/attachment-0001.htm>