Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1a297e75 by Salvatore Bonaccorso at 2026-07-21T09:54:06+02:00
Add one freerdp3 issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,7 +11,11 @@ CVE-2026-64626 (AVideo versions from commit 0dbadbca through
latest master conta
CVE-2026-64625 (AVideo before 29.0 contains an incomplete fix for
CVE-2026-45578 where ...)
NOT-FOR-US: WWBN AVideo
CVE-2026-64624 (FreeRDP before 3.28.0 treats lines beginning with forward
slash in RDP ...)
- TODO: check
+ - freerdp3 <unfixed> (unimportant)
+ - freerdp2 <removed> (unimportant)
+ NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rq8f-9xjh-pr3m
+ NOTE: With 3.28.0 the option has been disabled by default, issue when
handling
+ NOTE: an untrusted .rdp file
CVE-2026-64619 (FileCodeBox before 2.4 contains a rate-limit bypass
vulnerability in t ...)
NOT-FOR-US: FileCodeBox
CVE-2026-63771 (Adminer before 5.4.3 contains a cookie injection vulnerability
that al ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a297e7530ac72e3af6fb9646e030d858b97633f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a297e7530ac72e3af6fb9646e030d858b97633f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
