FEDORA-2022-a0a27f63ce — security update for freerdp

obsolete

freerdp-2.9.0-1.fc35

FEDORA-2022-a0a27f63ce created by oholy 2 years ago for Fedora 35

Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347).

This update has been submitted for testing by oholy.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

adamwill commented & provided feedback 2 years ago

karma

No critpath effects, lots of CVEs...

This update is marked obsolete because the F35 release is archived.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

2 years ago

in testing

2 years ago

Builds

freerdp-2.9.0-1.fc35

BZ#2143642 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder

BZ#2143643 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder

BZ#2143644 CVE-2022-39318 freerdp: division by zero in urbdrc channel

BZ#2143645 CVE-2022-39319 freerdp: missing length validation in urbdrc channel

BZ#2143646 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel

BZ#2143647 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel

BZ#2143648 CVE-2022-41877 freerdp: missing input length validation in `drive` channel

BZ#2143651 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder [fedora-35]

BZ#2143655 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder [fedora-35]

BZ#2143659 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel [fedora-35]

BZ#2143664 CVE-2022-39318 freerdp: division by zero in urbdrc channel [fedora-35]

BZ#2143666 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel [fedora-35]

BZ#2143667 CVE-2022-41877 freerdp: missing input length validation in `drive` channel [fedora-35]

BZ#2143672 CVE-2022-39319 freerdp: missing length validation in urbdrc channel [fedora-35]

freerdp-2.9.0-1.fc35

Automated Test Results

passed