File _patchinfo of Package patchinfo.31491

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.31491

<patchinfo incident="31491">
  <issue tracker="cve" id="2023-40181"/>
  <issue tracker="cve" id="2023-39356"/>
  <issue tracker="cve" id="2023-40186"/>
  <issue tracker="cve" id="2023-40188"/>
  <issue tracker="cve" id="2023-40576"/>
  <issue tracker="cve" id="2023-39352"/>
  <issue tracker="cve" id="2023-39353"/>
  <issue tracker="cve" id="2023-40589"/>
  <issue tracker="cve" id="2023-39354"/>
  <issue tracker="cve" id="2023-40569"/>
  <issue tracker="cve" id="2023-40567"/>
  <issue tracker="cve" id="2023-40574"/>
  <issue tracker="cve" id="2023-40575"/>
  <issue tracker="cve" id="2023-39350"/>
  <issue tracker="cve" id="2023-39351"/>
  <issue tracker="bnc" id="1214864">VUL-0: CVE-2023-40186: freerdp: IntegerOverflow leading to Out-Of-Bound Write Vulnerability in gdi_CreateSurface</issue>
  <issue tracker="bnc" id="1214856">VUL-0: CVE-2023-39350: freerdp: incorrect offset calculation leading to DoS</issue>
  <issue tracker="bnc" id="1214863">VUL-0: CVE-2023-40181: freerdp: Integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment</issue>
  <issue tracker="bnc" id="1214862">VUL-0: CVE-2023-39356: freerdp: Missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect</issue>
  <issue tracker="bnc" id="1214872">VUL-0: CVE-2023-40589: freerdp: Global-Buffer-Overflow in ncrush_decompress</issue>
  <issue tracker="bnc" id="1214860">VUL-0: CVE-2023-39354: freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data</issue>
  <issue tracker="bnc" id="1214867">VUL-0: CVE-2023-40567: freerdp:  Out-Of-Bounds Write in clear_decompress_bands_data</issue>
  <issue tracker="bnc" id="1214869">VUL-0: CVE-2023-40574: freerdp: Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX</issue>
  <issue tracker="bnc" id="1214868">VUL-0: CVE-2023-40569: freerdp: Out-Of-Bounds Write in progressive_decompress</issue>
  <issue tracker="bnc" id="1214857">VUL-0: CVE-2023-39351: freerdp: Null Pointer Dereference leading DoS in RemoteFX</issue>
  <issue tracker="bnc" id="1214866">VUL-0: CVE-2023-40188: freerdp: Out-Of-Bounds Read in general_LumaToYUV444</issue>
  <issue tracker="bnc" id="1214870">VUL-0: CVE-2023-40575: freerdp: Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX</issue>
  <issue tracker="bnc" id="1214871">VUL-0: CVE-2023-40576: freerdp: Out-Of-Bounds Read in RleDecompress</issue>
  <issue tracker="bnc" id="1214858">VUL-0: CVE-2023-39352: freerdp: Invalid offset validation leading to Out Of Bound Write</issue>
  <issue tracker="bnc" id="1214859">VUL-0: CVE-2023-39353: freerdp: Missing offset validation leading to Out Of Bound Read</issue>
  <packager>yudaike</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for freerdp</summary>
  <description>This update for freerdp fixes the following issues:

- CVE-2023-39350: Fixed incorrect offset calculation leading to DoS (bsc#1214856).
- CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX (bsc#1214857).
- CVE-2023-39352: Fixed Invalid offset validation leading to Out Of Bound Write (bsc#1214858).
- CVE-2023-39353: Fixed Missing offset validation leading to Out Of Bound Read (bsc#1214859).
- CVE-2023-39354: Fixed Out-Of-Bounds Read in nsc_rle_decompress_data (bsc#1214860).
- CVE-2023-39356: Fixed Missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (bsc#1214862).
- CVE-2023-40181: Fixed Integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (bsc#1214863).
- CVE-2023-40186: Fixed IntegerOverflow leading to Out-Of-Bound Write Vulnerability in gdi_CreateSurface (bsc#1214864).
- CVE-2023-40188: Fixed Out-Of-Bounds Read in general_LumaToYUV444 (bsc#1214866).
- CVE-2023-40567: Fixed Out-Of-Bounds Write in clear_decompress_bands_data (bsc#1214867).
- CVE-2023-40569: Fixed Out-Of-Bounds Write in progressive_decompress (bsc#1214868).
- CVE-2023-40574: Fixed Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX (bsc#1214869).
- CVE-2023-40575: Fixed Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX (bsc#1214870).
- CVE-2023-40576: Fixed Out-Of-Bounds Read in RleDecompress (bsc#1214871).
- CVE-2023-40589: Fixed Global-Buffer-Overflow in ncrush_decompress (bsc#1214872).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.31491

Places