[Git][security-tracker-team/security-tracker][master] More FreeRDP issues CVE-ified

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
862564cb by Salvatore Bonaccorso at 2026-10-16T09:55:59+02:00
More FreeRDP issues CVE-ified

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -136,16 +136,6 @@ CVE-2026-111384 (Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerab
 	TODO: check
 CVE-2026-111383 (Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnera ...)
 	TODO: check
-CVE-2026-111377 (FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vuln ...)
-	TODO: check
-CVE-2026-111376 (FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read v ...)
-	TODO: check
-CVE-2026-111375 (FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulner ...)
-	TODO: check
-CVE-2026-111374 (FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulne ...)
-	TODO: check
-CVE-2026-111373 (FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerabilit ...)
-	TODO: check
 CVE-2026-111369 (ClassroomIO through 1.0.0 contains an incorrect authorization vulnerab ...)
 	TODO: check
 CVE-2026-111368 (ClassroomIO through 1.0.0 contains an insecure direct object reference ...)
@@ -32761,19 +32751,19 @@ CVE-2026-XXXX [GHSA-7pwf-qh74-p35w: Caller-configured security limits not enforc
 	- libheif 1.23.6-1
 	[trixie] - libheif <no-dsa> (Minor issue)
 	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-7pwf-qh74-p35w
-CVE-2026-XXXX [GHSA-xq87-9rrm-6wqw]
+CVE-2026-111374 [GHSA-xq87-9rrm-6wqw]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xq87-9rrm-6wqw
-CVE-2026-XXXX [GHSA-3rvr-qvx8-rj23]
+CVE-2026-111375 [GHSA-3rvr-qvx8-rj23]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3rvr-qvx8-rj23
-CVE-2026-XXXX [GHSA-pvgq-84w2-93ph]
+CVE-2026-111376 [GHSA-pvgq-84w2-93ph]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pvgq-84w2-93ph
-CVE-2026-XXXX [GHSA-xm53-352c-57jw]
+CVE-2026-111377 [GHSA-xm53-352c-57jw]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw
@@ -32929,7 +32919,7 @@ CVE-2026-109241 (FreeRDP before 3.32.0 contains a NULL pointer dereference vulne
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2
-CVE-2026-XXXX [GHSA-83g2-gf92-5c4g]
+CVE-2026-111373 [GHSA-83g2-gf92-5c4g]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-83g2-gf92-5c4g



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/862564cbdff72f1ff64a0b7b467c5d272d439db5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/862564cbdff72f1ff64a0b7b467c5d272d439db5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/33b7da40/attachment.htm>