Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cb6c0529 by Salvatore Bonaccorso at 2026-07-10T10:53:49+02:00
Add CVE-2026-56297/freerdp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1327,7 +1327,11 @@ CVE-2026-56359 (n8n before 2.8.0 contains a cross-site
scripting vulnerability i
CVE-2026-56298 (Capgo before 12.128.2 fails to strip EXIF metadata from images
uploade ...)
NOT-FOR-US: Cap-go
CVE-2026-56297 (FreeRDP before 3.22.0 contains a use-after-free vulnerability
in dvcma ...)
- TODO: check
+ - freerdp3 3.22.0+dfsg-1
+ - freerdp2 <removed>
+ NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mv2-5q57-2v8h
+ NOTE:
https://github.com/FreeRDP/FreeRDP/commit/e02e052f6692550e539d10f99de9c35a23492db2
(3.22.0)
+ NOTE:
https://github.com/FreeRDP/FreeRDP/commit/cb7f295bc750de86480d60a3b58cebc56a57a1c4
(3.22.0)
CVE-2026-56293 (Capgo before 12.128.2 contains an authorization flaw in
transfer_app() ...)
NOT-FOR-US: Cap-go
CVE-2026-56284 (Capgo (Cap-go/capgo) before 12.128.2 contains an information
disclosur ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb6c05292b52d02a008d1d3fd5804cc6b21d76e6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb6c05292b52d02a008d1d3fd5804cc6b21d76e6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
