FEDORA-2022-a0a27f63ce — security update for freerdp

obsolete

freerdp-2.9.0-1.fc35

FEDORA-2022-a0a27f63ce created by oholy 10 months ago for Fedora 35

Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347).

This update has been submitted for testing by oholy.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

This update's test gating status has been changed to 'passed'.

10 months ago

This update has been pushed to testing.

9 months ago

adamwill commented & provided feedback 9 months ago

karma

No critpath effects, lots of CVEs...

This update is marked obsolete because the F35 release is archived.

9 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

freerdp-2.9.0-1.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

10 months ago

in testing

9 months ago

BZ#2143642 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder

BZ#2143643 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder

BZ#2143644 CVE-2022-39318 freerdp: division by zero in urbdrc channel

BZ#2143645 CVE-2022-39319 freerdp: missing length validation in urbdrc channel

BZ#2143646 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel

BZ#2143647 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel

BZ#2143648 CVE-2022-41877 freerdp: missing input length validation in `drive` channel

BZ#2143651 CVE-2022-39316 freerdp: out of bounds read in zgfx decoder [fedora-35]

BZ#2143655 CVE-2022-39317 freerdp: undefined behaviour in zgfx decoder [fedora-35]

BZ#2143659 CVE-2022-39320 freerdp: heap buffer overflow in urbdrc channel [fedora-35]

BZ#2143664 CVE-2022-39318 freerdp: division by zero in urbdrc channel [fedora-35]

BZ#2143666 CVE-2022-39347 freerdp: missing path sanitation with `drive` channel [fedora-35]

BZ#2143667 CVE-2022-41877 freerdp: missing input length validation in `drive` channel [fedora-35]

BZ#2143672 CVE-2022-39319 freerdp: missing length validation in urbdrc channel [fedora-35]

freerdp-2.9.0-1.fc35

Automated Test Results

passed