Ankur Tyagi
d17a7718d4
python3-sqlparse: patch CVE-2026-59894
...
Backport commit associated with GitHub advisory.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-59894
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:47 +05:30
Ankur Tyagi
2fa32e5e27
python3-sqlparse: patch CVE-2026-59893
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-59893
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:46 +05:30
Ankur Tyagi
bf592926cd
python3-sqlparse: patch CVE-2026-54284
...
Detais:
https://nvd.nist.gov/vuln/detail/cve-2026-54284
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:45 +05:30
Ankur Tyagi
0bfdd495a4
python3-marshmallow: mark CVE-2025-68480 fixed
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-68480
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:44 +05:30
Ankur Tyagi
47b2ce9cc7
python3-eventlet: mark CVE-2023-29483 fixed
...
Fix[1] for the CVE is part of the upstream version.
Details:
https://nvd.nist.gov/vuln/detail/cve-2023-29483
[1]https://github.com/eventlet/eventlet/commit/51e3c4928d4938beb576eff34f3bf97e6e64e6b4
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:43 +05:30
Ankur Tyagi
e4f07cb75d
python3-django: upgrade 6.0.7 -> 6.0.8
...
Also revert bump in the minimum setuptools version.
Release Notes:
https://docs.djangoproject.com/en/dev/releases/6.0.8/
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:42 +05:30
Peter Marko
5f4b6c3c61
polkit: patch CVE-2026-4897 and CVE-2026-85498
...
Pick patches mentioning these CVEs in their commit messages.
Note that patch for CVE-2026-4897 introduces CVE-2026-85498.
Also pick additional patch introduced between these commits which
touches the added code so the final patch applies cleanly.
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:41 +05:30
Peter Marko
46f6e32a2e
recipes: correct homepage
...
Leading space leads to SPDX document validation errors for url in
some tools.
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
(From meta-oe rev: 64dcb55dc5peter.marko@siemens.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:40 +05:30
Peter Marko
53f2c85097
msgpack-c: patch CVE-2026-72854
...
Pick patch from [1] linked from [2] mentioned in [3].
Drop version bump related changes.
[1] https://github.com/msgpack/msgpack-c/pull/1182/commits
[2] https://github.com/msgpack/msgpack-c/issues/1181
[3] https://nvd.nist.gov/vuln/detail/cve-2026-72854
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:39 +05:30
Devansh Patel
9ca5620389
python3-py: correct CVE_PRODUCT mapping
...
The product-only "py" mapping generates a wildcard-vendor identity
instead of the exact NVD identity for the packaged pytest-dev py
source. Use "pytest:py" for its NVD dictionary CPE and configuration
matches.
This changes the generated product identity. With sbom-cve-check 1.3.3,
the current CVE report is unchanged using the pinned database snapshots;
both mappings report CVE-2020-29651 and CVE-2022-42969.
Signed-off-by: Devansh Patel <devanshp@cisco.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
(cherry picked from commit 26fa8b053bdkelaiya@cisco.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:38 +05:30
Khem Raj
4ee9312479
openvpn: upgrade 2.7.0 -> 2.7.5
...
Upgrade openvpn from 2.7.0 to 2.7.5.
Changes:
* Drop 0001-tests-skip-test-execution-when-cross-compiling.patch
This release already guards the auth-pam unit test TESTS assignment with
"if !CROSS_COMPILING" in tests/unit_tests/plugins/auth-pam/Makefile.am
* Drop CVE-2026-40215.patch - fixed upstream in 2.7.2.
* Drop CVE-2026-13117.patch - fixed upstream in 2.7.5.
Security fixes included in this upgrade:
Fixed in 2.7.2:
* CVE-2026-40215: race condition in TLS handshake that could leak
packet data from a previous handshake
* CVE-2026-35058: server ASSERT() on a malformed packet with a valid
tls-crypt-v2 key
Fixed in 2.7.5:
* CVE-2026-13379: openvpnserv (Windows) DNS SearchList state pollution
* CVE-2026-12996: use-after-free in ack_write_buf()
* CVE-2026-13117: use-after-free in tls_wrap_reneg()
* CVE-2026-13122: server crash on malformed auth-token
* CVE-2026-12932: memory leak in tls-crypt-v2 client key handling
* CVE-2026-11771: 1-byte buffer overrun on NTLMv2 proxy responses
* CVE-2026-13698: memory leak on tls-crypt-v2 packets
Release notes:
https://github.com/openvpn/openvpn/releases
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:36 +05:30
Louis Rannou
b1740f6665
openvpn: create an extra package for the dns-updown script
...
The dns-updown script is written in bash which is under the GPLv3
license. As this script is optional, it is preferred to have it in an extra
package.
Signed-off-by: Louis Rannou <louis.rannou@non.se.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-10-05 14:40:35 +05:30
Ankur Tyagi
47d7dbdd10
unbound: patch CVE-2026-56444
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56444
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:05 +05:30
Ankur Tyagi
b03acb631b
unbound: patch CVE-2026-56416
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56416
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:04 +05:30
Ankur Tyagi
5401a83771
unbound: patch CVE-2026-55991
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55991
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:04 +05:30
Ankur Tyagi
b18b97d782
unbound: patch CVE-2026-55990
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55990
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:03 +05:30
Ankur Tyagi
5d932adbde
unbound: patch CVE-2026-55973
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55973
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:03 +05:30
Ankur Tyagi
44c0618c07
unbound: patch CVE-2026-55717
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55717
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:02 +05:30
Ankur Tyagi
7f1398a6c4
unbound: patch CVE-2026-55708
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55708
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:02 +05:30
Ankur Tyagi
1cede7d75e
unbound: patch CVE-2026-54478
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54478
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:01 +05:30
Ankur Tyagi
e88cf8a339
unbound: patch CVE-2026-52863
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-52863
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:01 +05:30
Ankur Tyagi
9cf83c6ad4
unbound: patch CVE-2026-50252
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50252
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:01 +05:30
Ankur Tyagi
ad6d182534
unbound: patch CVE-2026-50251
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50251
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:00 +05:30
Ankur Tyagi
252dc099d1
unbound: patch CVE-2026-50248
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50248
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:14:00 +05:30
Ankur Tyagi
a20f5dc9d3
unbound: patch CVE-2026-50243
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50243
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:59 +05:30
Ankur Tyagi
394ec2adfb
unbound: patch CVE-2026-50046
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50046
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:59 +05:30
Ankur Tyagi
5333e61d4f
unbound: patch CVE-2026-50045
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50045
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:58 +05:30
Ankur Tyagi
04efaf8876
unbound: patch CVE-2026-44687
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44687
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:58 +05:30
Ankur Tyagi
83e98ed1a1
unbound: patch CVE-2026-44621
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44621
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:57 +05:30
Ankur Tyagi
c805d76db2
unbound: patch CVE-2026-42955
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42955
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:57 +05:30
Ankur Tyagi
8792c7f818
unbound: patch CVE-2026-32665
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32665
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:56 +05:30
Ankur Tyagi
e7aac6e2ec
unbound: patch CVE-2026-46582
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-46582
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:56 +05:30
Ankur Tyagi
9af75c4481
unbound: patch CVE-2026-44608
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44608
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:55 +05:30
Ankur Tyagi
e9a946d263
unbound: patch CVE-2026-44390
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44390
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:55 +05:30
Ankur Tyagi
1c4d899d2d
unbound: patch CVE-2026-42960
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42960
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:55 +05:30
Ankur Tyagi
5d793b6ca9
unbound: patch CVE-2026-42923
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42923
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:54 +05:30
Ankur Tyagi
11bc965378
unbound: patch CVE-2026-42534
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42534
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:54 +05:30
Ankur Tyagi
565166d088
unbound: patch CVE-2026-41292
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41292
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:53 +05:30
Ankur Tyagi
7e47245343
unbound: patch CVE-2026-40622
...
Also backport TTL_IS_EXPIRED macro introduced by commit:
https://github.com/NLnetLabs/unbound/commit/73e408f1d0792267429e9f5f89537cda61297952
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-40622
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:53 +05:30
Ankur Tyagi
e5bdfcd5ed
unbound: patch CVE-2026-32792
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32792
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:52 +05:30
Ankur Tyagi
115d62e043
unbound: patch CVE-2026-42959
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42959
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:52 +05:30
Ankur Tyagi
47db00bd59
unbound: patch CVE-2026-42944
...
Backport commit[1] needed to cherry-pick the fix.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42944
[1]https://github.com/NLnetLabs/unbound/commit/44659cb3bf4601d2daa19a0d51ac5af54bc698bc
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:51 +05:30
Ankur Tyagi
4dce0f9343
unbound: patch CVE-2026-33278
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-33278
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:51 +05:30
Ankur Tyagi
6b4b2f8f80
zabbix: ignore multiple CVEs
...
CVE-2026-23922
https://support.zabbix.com/browse/ZBX-28067
https://nvd.nist.gov/vuln/detail/cve-2026-23922
CVE-2026-23924
https://support.zabbix.com/browse/ZBX-27642
https://nvd.nist.gov/vuln/detail/cve-2026-23924
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1856
CVE-2026-23926
https://support.zabbix.com/browse/ZBX-27758
https://nvd.nist.gov/vuln/detail/cve-2026-23926
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1787
CVE-2026-23927
https://support.zabbix.com/browse/ZBX-27759
https://nvd.nist.gov/vuln/detail/cve-2026-23927
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1785
CVE-2026-23928
https://support.zabbix.com/browse/ZBX-27760
https://nvd.nist.gov/vuln/detail/cve-2026-23928
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1786
CVE-2026-23931
https://support.zabbix.com/browse/ZBX-28070
https://nvd.nist.gov/vuln/detail/cve-2026-23931
CVE-2026-23933
https://support.zabbix.com/browse/ZBX-28071
https://nvd.nist.gov/vuln/detail/cve-2026-23933
CVE-2026-23934
https://support.zabbix.com/browse/ZBX-28072
https://nvd.nist.gov/vuln/detail/cve-2026-23934
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:50 +05:30
Deepak Rathore
a536b38899
rsyslog: Fix CVE-2026-19654
...
This patch applies the fix backported to rsyslog 8.2402.0 for
CVE-2026-19654. The upstream fix commit is referenced in [1], and
the public CVE advisory is referenced in [2]. The regression-test
commit is included in the same upstream pull request and referenced
in [3] and the individual commit is reference in [4].
[1] https://github.com/rsyslog/rsyslog/commit/07b3c40a5a78c79ed9109251f842ca7e955dd586
[2] https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29
[3] https://github.com/rsyslog/rsyslog/pull/7410
[4] https://github.com/rsyslog/rsyslog/commit/8e67ae69539153e4e80547dfb5f07ed17222e292
Signed-off-by: Deepak Rathore <deeratho@cisco.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:50 +05:30
Omkar Patil
2e1246f397
postgresql: upgrade 17.10 -> 17.11
...
Minor security release.
Refreshed the context of 0003-configure.ac-bypass-autoconf-2.69-version-check.patch
for the 17.11 sources (context/version line only, no functional change).
All other patches apply cleanly and are unchanged.
PostgreSQL 17.11 fixes several CVEs;
see the release notes: https://www.postgresql.org/docs/17/release-17-11.html
Ran ptest on qemux86-64: all tests passed.
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
24b8b4b3f1
python3-h11: mark CVE-2025-43859 patched
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-43859
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
2cb622eea6
python3-gunicorn: mark CVE-2024-1135 patched
...
Debian[1] also identified the commit.
Details:
https://nvd.nist.gov/vuln/detail/cve-2024-1135
[1]https://security-tracker.debian.org/tracker/CVE-2024-1135
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
933d86804a
freerdp3: patch CVE-2026-67288
...
Backport commit matching GitHub advisory[1] also identified by Debian[2]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-67288
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
[2]https://security-tracker.debian.org/tracker/CVE-2026-67288
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:48 +05:30
Ankur Tyagi
11f2bab405
freerdp3: patch CVE-2026-66401
...
Backport commit matching GitHub advisory[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-66401
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:48 +05:30
Ankur Tyagi
Peter Marko
Devansh Patel
Khem Raj
Louis Rannou
Deepak Rathore
Omkar Patil