Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9ea96a24 by Salvatore Bonaccorso at 2026-09-03T22:47:52+02:00
Add two new freerdp3 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -185,9 +185,16 @@ CVE-2026-85091 (zlib versions 1.3.1.2 through 1.3.2
contain a heap buffer overfl
NOTE:
https://github.com/madler/zlib/commit/e3dc0a85b7032e98380dec011bc8f2c2ee0d8fca
TODO: check details
CVE-2026-85090 (FreeRDP before 3.31.0 contains a heap out-of-bounds read
vulnerability ...)
- TODO: check
+ - freerdp3 3.31.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-57h7-vw2f-2f9x
+ NOTE: Fixed by:
https://github.com/FreeRDP/FreeRDP/commit/d0a481cb74ab57bca24791fe11b89464a332d3f1
(3.31.0)
CVE-2026-85089 (FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit
uniniti ...)
- TODO: check
+ - freerdp3 3.31.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v649-94v2-p72q
+ NOTE: Fixed by:
https://github.com/FreeRDP/FreeRDP/commit/056cede398d71c1f2540baebc26ec3327a249301
(3.31.0)
+ NOTE: Fixed by:
https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea
(3.31.0)
CVE-2026-85084 (Out-of-bounds Write and Improper Validation of Array Index
vulnerabili ...)
TODO: check
CVE-2026-85040 (A weakness has been identified in ZhongBangKeJi CRMEB up to
6.0.0. Aff ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ea96a24cfeda8b502281337693a0eb43a2eb1bc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ea96a24cfeda8b502281337693a0eb43a2eb1bc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
