FEDORA-2017-4bc09c2364 — security update for freerdp and remmina — Fedora Updates System

stable

freerdp-2.0.0-31.20170724gitf8c9f43.fc26 and remmina-1.2.0-0.39.20170724git0387ee0.fc26

FEDORA-2017-4bc09c2364 created by slaanesh 5 years ago for Fedora 26

Update to latest snapshot that contains fixes for the latest Talos discovered CVEs.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2017-4bc09c2364

This update has been submitted for testing by slaanesh.

This update has been pushed to testing.

filiperosset commented & provided feedback 5 years ago

karma

no regressions noted

wolnei commented & provided feedback 5 years ago

karma

No regressions noted.

wdpypere provided feedback 5 years ago

karma

BZ#1475240 CVE-2017-2836 freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service

BZ#1475239 CVE-2017-2837 freerdp: Rdp Client GCC Read Server Security Data Denial of Service

BZ#1475236 CVE-2017-2838 freerdp: Rdp Client License Read Product Info Denial of Service

BZ#1475234 CVE-2017-2839 freerdp: Rdp Client License Read Challenge Packet Denial of Service

BZ#1475233 CVE-2017-2835 freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu

BZ#1475224 CVE-2017-2834 freerdp: Out-of-bounds write in license_recv()

BZ#1473972 sporadic disk "lockup" occurring when moving away from remmina window

BZ#1475673 [abrt] remmina: transport_ssl_cb(): remmina killed by signal 11

BZ#1475246 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 freerdp: various flaws [fedora-all]

This update has been submitted for stable by bodhi.

wdpypere commented & provided feedback 5 years ago

karma

works for me

BZ#1475240 CVE-2017-2836 freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service

BZ#1475239 CVE-2017-2837 freerdp: Rdp Client GCC Read Server Security Data Denial of Service

BZ#1475236 CVE-2017-2838 freerdp: Rdp Client License Read Product Info Denial of Service

BZ#1475234 CVE-2017-2839 freerdp: Rdp Client License Read Challenge Packet Denial of Service

BZ#1475233 CVE-2017-2835 freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu

BZ#1475224 CVE-2017-2834 freerdp: Out-of-bounds write in license_recv()

BZ#1473972 sporadic disk "lockup" occurring when moving away from remmina window

BZ#1475673 [abrt] remmina: transport_ssl_cb(): remmina killed by signal 11

BZ#1475246 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 freerdp: various flaws [fedora-all]

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

3

Signed

Content Type

RPM

Test Gating

None

Builds

2

freerdp-2.0.0-31.20170724gitf8c9f43.fc26

remmina-1.2.0-0.39.20170724git0387ee0.fc26

Settings

Unstable by Karma

-3

Stable by Karma

3

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1473972 sporadic disk "lockup" occurring when moving away from remmina window

0

1

BZ#1475224 CVE-2017-2834 freerdp: Out-of-bounds write in license_recv()

0

1

BZ#1475233 CVE-2017-2835 freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu

0

1

BZ#1475234 CVE-2017-2839 freerdp: Rdp Client License Read Challenge Packet Denial of Service

0

1

BZ#1475236 CVE-2017-2838 freerdp: Rdp Client License Read Product Info Denial of Service

0

1

BZ#1475239 CVE-2017-2837 freerdp: Rdp Client GCC Read Server Security Data Denial of Service

0

1

BZ#1475240 CVE-2017-2836 freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service

0

1

BZ#1475246 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 freerdp: various flaws [fedora-all]

0

1

BZ#1475673 [abrt] remmina: transport_ssl_cb(): remmina killed by signal 11

0

1

freerdp-2.0.0-31.20170724gitf8c9f43.fc26

remmina-1.2.0-0.39.20170724git0387ee0.fc26

Automated Test Results

None