File _patchinfo of Package patchinfo.15125
<patchinfo incident="15125"> <issue tracker="bnc" id="1004108">freerdp copy and paste between remote host transform text to chinese</issue> <issue tracker="bnc" id="1050699">VUL-0: CVE-2017-2836: freerdp: FreeRDP Rdp Client Read Server Proprietary Certificate Denial of Service Vulnerability (TALOS-2017-0338)</issue> <issue tracker="bnc" id="1050704">VUL-0: CVE-2017-2837: freerdp: Client GCC Read Server Security Data DoS (TALOS-2017-0339)</issue> <issue tracker="bnc" id="1050708">VUL-0: CVE-2017-2838: freerdp: Client License Read Product Info Denial of Service Vulnerability</issue> <issue tracker="bnc" id="1050711">VUL-0: CVE-2017-2839: freerdp: Client License Read Challenge Packet Denial of Service</issue> <issue tracker="bnc" id="1050712">VUL-0: CVE-2017-2835: freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu</issue> <issue tracker="bnc" id="1050714">VUL-0: CVE-2017-2834: freerdp: Out-of-bounds write in license_recv()</issue> <issue tracker="bnc" id="1085416">FreeRDP/Remmina can not connect to Windows 7-10 with March 2018 updates</issue> <issue tracker="bnc" id="1087240">SLE FreeRDP broken following Windows updates.</issue> <issue tracker="bnc" id="1090677">X11:RemoteDesktop/freerdp: Bug missing pulse support</issue> <issue tracker="bnc" id="1103557">xfreerdp crashes due to double free'd memory</issue> <issue tracker="bnc" id="1104918">clone bug: SLE12 SP3 PTF for SLE FreeRDP broken following Windows updates.</issue> <issue tracker="bnc" id="1112028">Remmina does not connect to remote server (works on Mac OS X and with latest Remmina (flatpak)</issue> <issue tracker="bnc" id="1116708">VUL-0: CVE-2018-8784: freerdp: Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.</issue> <issue tracker="bnc" id="1117963">VUL-0: CVE-2018-8788: freerdp: Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.</issue> <issue tracker="bnc" id="1117964">VUL-0: CVE-2018-8787: freerdp: Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code</issue> <issue tracker="bnc" id="1117965">VUL-0: CVE-2018-8789: freerdp: several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).</issue> <issue tracker="bnc" id="1117966">VUL-0: CVE-2018-8786: freerdp: Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remot</issue> <issue tracker="bnc" id="1117967">VUL-0: CVE-2018-8785: freerdp: a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.</issue> <issue tracker="bnc" id="1120507">VUL-0: CVE-2018-1000852: freerdp: out of bounds read in drdynvc_process_capability_request</issue> <issue tracker="bnc" id="1129193">freerdp doesn't start</issue> <issue tracker="bnc" id="1169679">Unable to use USB redirection with FreeRDP</issue> <issue tracker="bnc" id="1169748">freerdp fails with -fno-common</issue> <issue tracker="bnc" id="1171441">VUL-0: CVE-2020-11039,CVE-2020-11038,CVE-2020-11043,CVE-2020-11040,CVE-2020-11041,CVE-2020-11019,CVE-2020-11017,CVE-2020-11018: freerdp: 2.1.0 fixes several CVEs, leaks and crashes</issue> <issue tracker="bnc" id="1171443">VUL-0: CVE-2020-11521: freerdp: out-of-bounds write in planar.c</issue> <issue tracker="bnc" id="1171444">VUL-1: CVE-2020-11522: freerdp: out-of-bounds read in gdi.c</issue> <issue tracker="bnc" id="1171445">VUL-1: CVE-2020-11523: freerdp: integer overflow in region.c</issue> <issue tracker="bnc" id="1171446">VUL-0: CVE-2020-11524: freerdp: out-of-bounds write in interleaved.c</issue> <issue tracker="bnc" id="1171447">VUL-1: CVE-2020-11525: freerdp: out-of-bounds read in bitmap.c</issue> <issue tracker="bnc" id="1171674">VUL-1: CVE-2020-11526: freerdp: out-of-bounds read in update_recv_secondary_order</issue> <issue tracker="bnc" id="1004108">freerdp copy and paste between remote host transform text to chinese</issue> <issue tracker="bnc" id="1173247">VUL-0: CVE-2020-4030,CVE-2020-4031,CVE-2020-4032,CVE-2020-4033,CVE-2020-11095,CVE-2020-11096,CVE-2020-11097,CVE-2020-11098,CVE-2020-11099: freerdp: vulnerabilities fixed with 2.1.2</issue> <issue tracker="bnc" id="1173605">Constant disconnects with freerdp v2.1.2</issue> <issue tracker="bnc" id="1174200"></issue> <issue tracker="bnc" id="1174321">VUL-0: CVE-2020-15103: freerdp: Integer overflow due to missing input sanitation in rdpegfx channel</issue> <issue tracker="cve" id="2017-2834"/> <issue tracker="cve" id="2017-2835"/> <issue tracker="cve" id="2017-2836"/> <issue tracker="cve" id="2017-2837"/> <issue tracker="cve" id="2017-2838"/> <issue tracker="cve" id="2017-2839"/> <issue tracker="cve" id="2018-0886"/> <issue tracker="cve" id="2018-8784"/> <issue tracker="cve" id="2018-8785"/> <issue tracker="cve" id="2018-8786"/> <issue tracker="cve" id="2018-8787"/> <issue tracker="cve" id="2018-8788"/> <issue tracker="cve" id="2018-8789"/> <issue tracker="cve" id="2018-1000852"/> <issue tracker="cve" id="2020-4030"/> <issue tracker="cve" id="2020-4031"/> <issue tracker="cve" id="2020-4032"/> <issue tracker="cve" id="2020-4033"/> <issue tracker="cve" id="2020-11017"/> <issue tracker="cve" id="2020-11018"/> <issue tracker="cve" id="2020-11019"/> <issue tracker="cve" id="2020-11038"/> <issue tracker="cve" id="2020-11039"/> <issue tracker="cve" id="2020-11040"/> <issue tracker="cve" id="2020-11041"/> <issue tracker="cve" id="2020-11043"/> <issue tracker="cve" id="2020-11085"/> <issue tracker="cve" id="2020-11086"/> <issue tracker="cve" id="2020-11087"/> <issue tracker="cve" id="2020-11088"/> <issue tracker="cve" id="2020-11089"/> <issue tracker="cve" id="2020-11095"/> <issue tracker="cve" id="2020-11096"/> <issue tracker="cve" id="2020-11097"/> <issue tracker="cve" id="2020-11098"/> <issue tracker="cve" id="2020-11099"/> <issue tracker="cve" id="2020-11521"/> <issue tracker="cve" id="2020-11522"/> <issue tracker="cve" id="2020-11523"/> <issue tracker="cve" id="2020-11524"/> <issue tracker="cve" id="2020-11525"/> <issue tracker="cve" id="2020-11526"/> <issue tracker="cve" id="2020-13396"/> <issue tracker="cve" id="2020-13397"/> <issue tracker="cve" id="2020-13398"/> <issue tracker="cve" id="2020-15103"/> <issue tracker="fate" id="326739"/> <packager>qkzhu</packager> <rating>important</rating> <category>security</category> <summary>Security update for freerdp</summary> <description>This update for freerdp fixes the following issues: freerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006): - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered. - CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to "WLOG_TRACE". - CVE-2020-11038: Fixed a buffer overflow when /video redirection was used. - CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled. - CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex. - CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service. - CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset. - CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list. - CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge. - CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage. - CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage. - CVE-2020-11089: Fixed an out of bounds read in irp function family. - CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order. - CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order. - CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get. - CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put. - CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet. - CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443). - CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444). - CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445). - CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446). - CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447). - CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674). - CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage. - CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value. - CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common. - CVE-2020-4030: Fixed an out of bounds read in `TrioParse`. - CVE-2020-4031: Fixed a use after free in gdi_SelectObject. - CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`. - CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS. - Fixed an issue where freerdp failed with -fno-common (bsc#1169748). - Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679). - Fixed an issue where freerdp could not start (bsc#1129193). - Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108). - Added pulse support (bsc#1090677). Additionally, the following issue was fixed: - CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321). </description> </patchinfo>
