Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c2558dfa by Salvatore Bonaccorso at 2025-05-22T21:10:04+02:00
Re-associate CVE-2025-4478 with freerdp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2665,11 +2665,12 @@ CVE-2024-45067 (Incorrect default permissions in some
Intel(R) Gaudi(R) software
CVE-2024-13914 (The File Manager Advanced Shortcode WordPress plugin for
WordPress is ...)
NOT-FOR-US: WordPress plugin
CVE-2025-4478 (A flaw was found in the gnome-remote-desktop used by Anaconda's
remote ...)
- - gnome-remote-desktop <unfixed> (bug #1105917)
- [bookworm] - gnome-remote-desktop <no-dsa> (Minor issue)
- [bullseye] - gnome-remote-desktop <ignored> (Minor issue)
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365232
- NOTE: Related:
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/196
+ - freerdp3 <unfixed> (bug #1105917)
+ - freerdp2 <removed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365232#c9
+ NOTE: Vulnerability in freerdp code, which transitively affects
gnome-remote-desktop
+ NOTE: https://github.com/FreeRDP/FreeRDP/pull/11573
+ NOTE: Fixed by:
https://github.com/FreeRDP/FreeRDP/commit/a4bb702aa62e4fad91ca99142de075265555ec18
CVE-2025-23165 (In Node.js, the `ReadFileUtf8` internal binding leaks memory
due to a ...)
- nodejs 20.19.2+dfsg-1 (bug #1105832)
[bullseye] - nodejs <not-affected> (The vulnerable code was introduced
later)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2558dfa68feeed37ec901f3809274ebfdc0b139
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2558dfa68feeed37ec901f3809274ebfdc0b139
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
