Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ece87c76 by Salvatore Bonaccorso at 2026-10-12T21:30:35+02:00
Track first batch of now assigned freerdp issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -400,18 +400,6 @@ CVE-2026-109247 (FreeRDP before 3.32.0 contains a path
traversal vulnerability i
TODO: check
CVE-2026-109246 (FreeRDP before 3.32.0 contains a divide-by-zero vulnerability
in the f ...)
TODO: check
-CVE-2026-109245 (FreeRDP 3.0.0 before 3.32.0 contains an improper certificate
validatio ...)
- TODO: check
-CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure
permission vulne ...)
- TODO: check
-CVE-2026-109243 (FreeRDP from 3.0.0 before 3.32.0 contains an incorrect
permission assi ...)
- TODO: check
-CVE-2026-109242 (FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders
uninitialized hea ...)
- TODO: check
-CVE-2026-109241 (FreeRDP before 3.32.0 contains a NULL pointer dereference
vulnerabilit ...)
- TODO: check
-CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion
vulnerabil ...)
- TODO: check
CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request
forgery vul ...)
TODO: check
CVE-2026-109238 (Crawl4AI 0.7.0 before 0.9.4 contains a server-side request
forgery vul ...)
@@ -17122,7 +17110,7 @@ CVE-2026-103111 (PCRE2 before 10.49, when there is an
attacker-controlled regula
- pcre2 10.48-3.1 (bug #1149217)
NOTE:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
NOTE: Fixed by:
https://github.com/PCRE2Project/pcre2/commit/2b4038298072684b0fae29b15bedfb1a75bda46d
(pcre2-10.49)
-CVE-2026-XXXX [GHSA-9qqc-m43j-g4r2]
+CVE-2026-109240 [GHSA-9qqc-m43j-g4r2]
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qqc-m43j-g4r2
@@ -23638,11 +23626,11 @@ CVE-2026-XXXX [GHSA-cq4m-gwc5-w8rc]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cq4m-gwc5-w8rc
-CVE-2026-XXXX [GHSA-q9p9-j22r-577p]
+CVE-2026-109243 [GHSA-q9p9-j22r-577p]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9p9-j22r-577p
-CVE-2026-XXXX [GHSA-2jfv-j3wx-5cg4]
+CVE-2026-109244 [GHSA-2jfv-j3wx-5cg4]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4
@@ -23718,7 +23706,7 @@ CVE-2026-XXXX [GHSA-jhxw-3hj9-9hqh]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh
-CVE-2026-XXXX [GHSA-h44v-39x6-9xvg]
+CVE-2026-109245 [GHSA-h44v-39x6-9xvg]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h44v-39x6-9xvg
@@ -23790,11 +23778,11 @@ CVE-2026-XXXX [GHSA-f4pf-pgp4-f2r3]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f4pf-pgp4-f2r3
-CVE-2026-XXXX [GHSA-4mpr-hmqx-83q8]
+CVE-2026-109242 [GHSA-4mpr-hmqx-83q8]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4mpr-hmqx-83q8
-CVE-2026-XXXX [GHSA-x7v7-9jp5-wqj2]
+CVE-2026-109241 [GHSA-x7v7-9jp5-wqj2]
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ece87c764d319f885b0aad6a1f7ada9cd952c239
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ece87c764d319f885b0aad6a1f7ada9cd952c239
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
