[Git][security-tracker-team/security-tracker][master] Some FreeRDP CVEified

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1a4faf37 by Salvatore Bonaccorso at 2026-10-21T22:04:16+02:00
Some FreeRDP CVEified

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1558,20 +1558,6 @@ CVE-2026-114049 (vLLM before 0.31.0 contains a cross-request mask leak in InputB
 	- vllm <itp> (bug #1095237)
 CVE-2026-114048 (WWBN AVideo before 24.0 contains a cross-site request forgery vulnerab ...)
 	NOT-FOR-US: WWBN AVideo
-CVE-2026-114047 (FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate vali ...)
-	TODO: check
-CVE-2026-114046 (FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the ...)
-	TODO: check
-CVE-2026-114045 (FreeRDP before 3.32.1 contains a heap-based buffer overflow in the ser ...)
-	TODO: check
-CVE-2026-114044 (FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability ...)
-	TODO: check
-CVE-2026-114043 (FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinP ...)
-	TODO: check
-CVE-2026-114042 (FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc  ...)
-	TODO: check
-CVE-2026-114041 (FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in ...)
-	TODO: check
 CVE-2026-114040 (A security vulnerability has been detected in DT42 BerryNet up to 3.10 ...)
 	TODO: check
 CVE-2026-114039 (A weakness has been identified in projectworlds Advanced Library Manag ...)
@@ -35629,23 +35615,23 @@ CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vul
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qqc-m43j-g4r2
-CVE-2026-XXXX [GHSA-3m9q-g533-rqjq]
+CVE-2026-114045 [GHSA-3m9q-g533-rqjq]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3m9q-g533-rqjq
-CVE-2026-XXXX [GHSA-262p-h989-vmpv]
+CVE-2026-114044 [GHSA-262p-h989-vmpv]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-262p-h989-vmpv
-CVE-2026-XXXX [GHSA-5xjc-c64q-m8r6]
+CVE-2026-114042 [GHSA-5xjc-c64q-m8r6]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5xjc-c64q-m8r6
-CVE-2026-XXXX [GHSA-f3vg-h45x-6wgf]
+CVE-2026-114043 [GHSA-f3vg-h45x-6wgf]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f3vg-h45x-6wgf
-CVE-2026-XXXX [GHSA-c49c-xm94-5qf3]
+CVE-2026-114041 [GHSA-c49c-xm94-5qf3]
 	- freerdp3 3.32.1+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c49c-xm94-5qf3
@@ -42137,7 +42123,7 @@ CVE-2026-110830 (FreeRDP before 3.32.0 fails to close prior serial handles in se
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9
-CVE-2026-XXXX [GHSA-q6pp-28g8-xqjc]
+CVE-2026-114046 [GHSA-q6pp-28g8-xqjc]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjc
@@ -42153,7 +42139,7 @@ CVE-2026-110833 (FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulat
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7g5-gw57-cwcr
-CVE-2026-XXXX [GHSA-pjxv-5j98-cqx4]
+CVE-2026-114047 [GHSA-pjxv-5j98-cqx4]
 	- freerdp3 3.32.0+dfsg-1
 	- freerdp2 <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjxv-5j98-cqx4



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a4faf3711aaca3739dca46d73f6b46d4074537f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a4faf3711aaca3739dca46d73f6b46d4074537f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/0a59db1d/attachment-0001.htm>