FEDORA-2022-076b1c9978 — security update for freerdp

stable

freerdp-2.9.0-1.fc37

FEDORA-2022-076b1c9978 created by oholy 2 years ago for Fedora 37

Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347).

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-076b1c9978

This update has been submitted for testing by oholy.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

pwalter commented & provided feedback 2 years ago

karma

Works

besser82 commented & provided feedback 2 years ago

karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

Builds

freerdp-2.9.0-1.fc37

BZ#2143642 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder

BZ#2143643 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder

BZ#2143644 CVE-2022-39318 freerdp: division by zero in urbdrc channel

BZ#2143645 CVE-2022-39319 freerdp: missing length validation in urbdrc channel

BZ#2143646 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel

BZ#2143647 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel

BZ#2143648 CVE-2022-41877 freerdp: missing input length validation in `drive` channel

BZ#2143653 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder [fedora-37]

BZ#2143657 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder [fedora-37]

BZ#2143661 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel [fedora-37]

BZ#2143673 CVE-2022-39318 freerdp: division by zero in urbdrc channel [fedora-37]

BZ#2143674 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel [fedora-37]

BZ#2143675 CVE-2022-41877 freerdp: missing input length validation in `drive` channel [fedora-37]

BZ#2143677 CVE-2022-39319 freerdp: missing length validation in urbdrc channel [fedora-37]

freerdp-2.9.0-1.fc37

Automated Test Results

passed