[Git][security-tracker-team/security-tracker][master] CVE-2021-41160/freerdp2 - buster backport is not feasible, setting to ignored.

[Tobias Frost (@tobi)]

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker


Commits:
54629370 by Tobias Frost at 2023-11-12T11:57:42+01:00
CVE-2021-41160/freerdp2 - buster backport is not feasible, setting to ignored.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -152928,10 +152928,11 @@ CVE-2021-41160 (FreeRDP is a free implementation of the Remote Desktop Protocol
 CVE-2021-41159 (FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...)
 	- freerdp2 2.4.1+dfsg1-1 (bug #1001061)
 	[bullseye] - freerdp2 <no-dsa> (Minor issue)
-	[buster] - freerdp2 <no-dsa> (Minor issue)
+	[buster] - freerdp2 <ignored> (Patch is too instrusive to backport)
 	- freerdp <removed>
 	NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vh34-m9h7-95xq
 	NOTE: https://github.com/FreeRDP/FreeRDP/commit/d39a7ba5c38e3ba3b99b1558dc2ab0970cbfb0c5 (Stable 2.0 backports)
+	NOTE: The RFC gateway parsing code has been completly refactored, backporting to 2.3.x is not feasible.
 	NOTE: https://github.com/FreeRDP/FreeRDP/commit/f0b44da67c09488178000725ff9f2729ccfdf9fe
 CVE-2021-41158 (FreeSWITCH is a Software Defined Telecom Stack enabling the digital tr ...)
 	- freeswitch <itp> (bug #389591)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54629370e010f1a589026e4e865bad921b90f933

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54629370e010f1a589026e4e865bad921b90f933
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231112/30646c33/attachment-0001.htm>