[Git][security-tracker-team/security-tracker][wip/gnome-remote-desktop-202610] Update status for 2 gnome-remote-desktop issues

[Jeremy Bícha (@jbicha)]

Jeremy Bícha pushed to branch wip/gnome-remote-desktop-202610 at Debian Security Tracker / security-tracker


Commits:
4331dd36 by Jeremy Bícha at 2026-10-21T08:51:35+02:00
Update status for 2 gnome-remote-desktop issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37522,6 +37522,7 @@ CVE-2026-96541 (A denial-of-service flaw was found in gnome-remote-desktop. An u
 	[trixie] - gnome-remote-desktop <not-affected> (Incomplete fix for CVE-2025-5024 not applied)
 	[bookworm] - gnome-remote-desktop <not-affected> (Incomplete fix for CVE-2025-5024 not applied)
 	NOTE: https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/merge_requests/436
 	NOTE: Introduced with: https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/commit/959cd39ae528a6751d94b0dcff173a470a5bc7ef (50.beta)
 	NOTE: Issue exists because of an incomplete fix of CVE-2025-5024.
 CVE-2026-96514 (A weakness has been identified in Neethuharii CafeManagement. Impacted ...)
@@ -106325,9 +106326,10 @@ CVE-2026-18437 (The MailerPress \u2013 Newsletter, email marketing & AI automati
 CVE-2026-18436 (The MailPress plugin for WordPress is vulnerable to unauthorized acces ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-18358 (A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterpr ...)
-	- gnome-remote-desktop <undetermined>
+	- gnome-remote-desktop 50.1-1
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462876
-	TODO: does not affect an upstream version, but need to check if still only Red Hat specific, check details RH bug
+	NOTE: https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/work_items/348
+	NOTE: Fixed in gnome-remote-desktop 50
 CVE-2026-18321 (Buffer overflow in NTPsec's Zyfer refclock allows local attacker to cr ...)
 	- ntpsec 1.2.5+dfsg-1 (bug #1144477)
 	[trixie] - ntpsec <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4331dd36eb40eff24109bcd25016be7feb82036b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4331dd36eb40eff24109bcd25016be7feb82036b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/c4ab2978/attachment-0001.htm>