[SECURITY] [DLA 4070-1] freerdp2 security update and regression fix

Debian LTS Advisory DLA-4070-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost February 27, 2025 https://wiki.debian.org/LTS Package : freerdp2 Version : 2.3.0+dfsg1-2+deb11u3 CVE ID : CVE-2022-24882 CVE-2022-39320 Debian Bug : 1024511 1098355 Multiple vulnerabilties...

CVE-2025-27142

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the POST /api/localsend/v2/prepare-upload and th...

CVE-2022-49047

creationtimestamp| type| source ---|---|--- 2025-02-27 18:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5745 2025-08-16 01:45:15+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:36+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

CVE-2024-9285

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5729 2025-02-27 19:15:39+00:00| seen| https://t.me/cvedetector/19051 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-1742

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5723 2025-02-27 19:15:36+00:00| seen| https://t.me/cvedetector/19047 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-1741

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5707 2025-02-27 19:15:57+00:00| seen| https://t.me/cvedetector/19063 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-23687

creationtimestamp| type| source ---|---|--- 2025-02-27 16:25:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5704 2025-02-27 19:15:37+00:00| seen| https://t.me/cvedetector/19049 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c 2025-12-30...

CVE-2025-0759

creationtimestamp| type| source ---|---|--- 2025-02-27 15:29:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5687 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2024-13217

creationtimestamp| type| source ---|---|--- 2025-02-27 11:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5663 2025-02-27 14:33:54+00:00| seen| https://t.me/cvedetector/19036 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-1689

creationtimestamp| type| source ---|---|--- 2025-02-27 10:22:17+00:00| seen| https://t.me/cvedetector/19028 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2024-5848

creationtimestamp| type| source ---|---|--- 2025-02-27 07:25:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5656 2025-02-27 10:22:16+00:00| seen| https://t.me/cvedetector/19027 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-21720

creationtimestamp| type| source ---|---|--- 2025-02-27 04:30:23+00:00| seen| https://t.me/cvedetector/18986 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80...

CVE-2025-21716

creationtimestamp| type| source ---|---|--- 2025-02-27 02:25:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5641 2025-02-27 04:30:30+00:00| seen| https://t.me/cvedetector/18991 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80...

CVE-2025-21721

creationtimestamp| type| source ---|---|--- 2025-02-27 02:25:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5639 2025-02-27 04:30:25+00:00| seen| https://t.me/cvedetector/18988 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80...

CVE-2024-50687

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzss4lf2y 2025-02-27 00:19:28+00:00| seen| https://t.me/cvedetector/189...

CVE-2025-25791

creationtimestamp| type| source ---|---|--- 2025-02-26 20:08:36+00:00| seen| https://t.me/cvedetector/18956 2025-03-03 17:31:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6245 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19...

CVE-2025-0941

creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5546 2025-02-26 20:08:22+00:00| seen| https://t.me/cvedetector/18946 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-0719

creationtimestamp| type| source ---|---|--- 2025-02-26 14:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5495 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-26698

creationtimestamp| type| source ---|---|--- 2025-02-26 09:24:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5480 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

UBUNTU-CVE-2022-49364

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty inode in f2fsevictinode As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215904 The kernel message is shown below: kernel BUG at fs/f2fs/inode.c:825! Call Trace: evict+0x282/0x4...