[Git][security-tracker-team/security-tracker][master] Re-associate CVE-2025-4478 with freerdp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c2558dfa by Salvatore Bonaccorso at 2025-05-22T21:10:04+02:00
Re-associate CVE-2025-4478  with freerdp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2665,11 +2665,12 @@ CVE-2024-45067 (Incorrect default permissions in some Intel(R) Gaudi(R) software
 CVE-2024-13914 (The File Manager Advanced Shortcode WordPress plugin for WordPress is  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-4478 (A flaw was found in the gnome-remote-desktop used by Anaconda's remote ...)
-	- gnome-remote-desktop <unfixed> (bug #1105917)
-	[bookworm] - gnome-remote-desktop <no-dsa> (Minor issue)
-	[bullseye] - gnome-remote-desktop <ignored> (Minor issue)
-	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365232
-	NOTE: Related: https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/196
+	- freerdp3 <unfixed> (bug #1105917)
+	- freerdp2 <removed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2365232#c9
+	NOTE: Vulnerability in freerdp code, which transitively affects gnome-remote-desktop
+	NOTE: https://github.com/FreeRDP/FreeRDP/pull/11573
+	NOTE: Fixed by: https://github.com/FreeRDP/FreeRDP/commit/a4bb702aa62e4fad91ca99142de075265555ec18
 CVE-2025-23165 (In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a  ...)
 	- nodejs 20.19.2+dfsg-1 (bug #1105832)
 	[bullseye] - nodejs <not-affected> (The vulnerable code was introduced later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2558dfa68feeed37ec901f3809274ebfdc0b139

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c2558dfa68feeed37ec901f3809274ebfdc0b139
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250522/c87053e8/attachment.htm>