[Git][security-tracker-team/security-tracker][master] Two more FreeRDP issues CVEified

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e9f8dc6a by Salvatore Bonaccorso at 2026-10-17T21:20:43+02:00
Two more FreeRDP issues CVEified

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -96,10 +96,6 @@ CVE-2026-111884 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does no
 	NOT-FOR-US: phpMyFAQ
 CVE-2026-111882 (phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta co ...)
 	NOT-FOR-US: phpMyFAQ
-CVE-2026-111881 (FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the ...)
-	TODO: check
-CVE-2026-111880 (FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds ...)
-	TODO: check
 CVE-2026-111110 (The Payment forms, Buy now buttons, and Invoicing System | GetPaid plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-110889 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
@@ -34218,7 +34214,7 @@ CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure permissio
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4
-CVE-2026-XXXX [GHSA-cmgx-558f-vh67]
+CVE-2026-111880 [GHSA-cmgx-558f-vh67]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cmgx-558f-vh67
@@ -34230,7 +34226,7 @@ CVE-2026-110839 (FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4
-CVE-2026-XXXX [GHSA-27m7-gwhh-6hhf]
+CVE-2026-111881 [GHSA-27m7-gwhh-6hhf]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-27m7-gwhh-6hhf



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f8dc6a034b7b1cb53d0ea13c804393ef8c6eb9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9f8dc6a034b7b1cb53d0ea13c804393ef8c6eb9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/2fe3198a/attachment-0001.htm>