[Git][security-tracker-team/security-tracker][master] Add two new freerdp3 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ea96a24 by Salvatore Bonaccorso at 2026-09-03T22:47:52+02:00
Add two new freerdp3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -185,9 +185,16 @@ CVE-2026-85091 (zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overfl
 	NOTE: https://github.com/madler/zlib/commit/e3dc0a85b7032e98380dec011bc8f2c2ee0d8fca
 	TODO: check details
 CVE-2026-85090 (FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability ...)
-	TODO: check
+	- freerdp3 3.31.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-57h7-vw2f-2f9x
+	NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/d0a481cb74ab57bca24791fe11b89464a332d3f1 (3.31.0)
 CVE-2026-85089 (FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uniniti ...)
-	TODO: check
+	- freerdp3 3.31.0+dfsg-1
+	- freerdp2 <removed>
+	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v649-94v2-p72q
+	NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/056cede398d71c1f2540baebc26ec3327a249301 (3.31.0)
+	NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea (3.31.0)
 CVE-2026-85084 (Out-of-bounds Write and Improper Validation of Array Index vulnerabili ...)
 	TODO: check
 CVE-2026-85040 (A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Aff ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ea96a24cfeda8b502281337693a0eb43a2eb1bc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ea96a24cfeda8b502281337693a0eb43a2eb1bc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260903/3125b09a/attachment.htm>