File _patchinfo of Package patchinfo.14768

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.14768

<patchinfo incident="14768">
  <issue tracker="bnc" id="1174200"></issue>
  <issue tracker="bnc" id="1173605">Constant disconnects with freerdp v2.1.2</issue>
 <issue tracker="bnc" id="1171441">VUL-0: CVE-2020-11039,CVE-2020-11038,CVE-2020-11043,CVE-2020-11040,CVE-2020-11041,CVE-2020-11019,CVE-2020-11017,CVE-2020-11018: freerdp: 2.1.0 fixes several CVEs, leaks and crashes</issue>
 <issue tracker="bnc" id="1173247">VUL-0: CVE-2020-4030,CVE-2020-4031,CVE-2020-4032,CVE-2020-4033,CVE-2020-11095,CVE-2020-11096,CVE-2020-11097,CVE-2020-11098,CVE-2020-11099: freerdp: vulnerabilities fixed with 2.1.2</issue> 
 <issue tracker="bnc" id="1171444">VUL-1: CVE-2020-11522: freerdp: out-of-bounds read in gdi.c</issue>
 <issue tracker="bnc" id="1171445">VUL-1: CVE-2020-11523: freerdp: integer overflow in region.c</issue>
 <issue tracker="bnc" id="1171443">VUL-0: CVE-2020-11521: freerdp: out-of-bounds write in planar.c</issue>
 <issue tracker="bnc" id="1171446">VUL-0: CVE-2020-11524: freerdp: out-of-bounds write in interleaved.c</issue>
 <issue tracker="bnc" id="1171447">VUL-1: CVE-2020-11525: freerdp: out-of-bounds read in bitmap.c</issue>
 <issue tracker="bnc" id="1171474">VUL-1: CVE-2020-11526: freerdp: out-of-bounds read in update_recv_secondary_order</issue>
 <issue tracker="bnc" id="1169748">freerdp fails with -fno-common</issue>
 <issue tracker="bnc" id="1169679">Unable to use USB redirection with FreeRDP</issue>
 <issue tracker="cve" id="2020-11017"/>
 <issue tracker="cve" id="2020-11018"/>
 <issue tracker="cve" id="2020-11019"/>
 <issue tracker="cve" id="2020-11038"/>
 <issue tracker="cve" id="2020-11039"/>
 <issue tracker="cve" id="2020-11040"/>
 <issue tracker="cve" id="2020-11041"/>
 <issue tracker="cve" id="2020-11043"/>
 <issue tracker="cve" id="2020-11085"/>
 <issue tracker="cve" id="2020-11086"/>
 <issue tracker="cve" id="2020-11087"/>
 <issue tracker="cve" id="2020-11088"/>
 <issue tracker="cve" id="2020-11089"/>
 <issue tracker="cve" id="2020-11095"/>
 <issue tracker="cve" id="2020-11096"/>
 <issue tracker="cve" id="2020-11097"/>
 <issue tracker="cve" id="2020-11098"/>
 <issue tracker="cve" id="2020-11099"/>
 <issue tracker="cve" id="2020-11521"/>
 <issue tracker="cve" id="2020-11522"/>
 <issue tracker="cve" id="2020-11523"/>
 <issue tracker="cve" id="2020-11524"/>
 <issue tracker="cve" id="2020-11525"/>
 <issue tracker="cve" id="2020-11526"/>
 <issue tracker="cve" id="2020-13396"/>
 <issue tracker="cve" id="2020-13397"/>
 <issue tracker="cve" id="2020-13398"/>
 <issue tracker="cve" id="2020-4030"/>
 <issue tracker="cve" id="2020-4031"/>
 <issue tracker="cve" id="2020-4032"/>
 <issue tracker="cve" id="2020-4033"/>
 <issue tracker="jsc" id="ECO-2006"></issue>
  <packager>qkzhu</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for freerdp</summary>
  <description>This update for freerdp fixes the following issues:

frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):

- CVE-2020-11017: Fixed a double free which could have denied the server's service.
- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.
- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to "WLOG_TRACE".
- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.
- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.
- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.
- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.
- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.
- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.
- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.
- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.
- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.
- CVE-2020-11089: Fixed an out of bounds read in irp function family.
- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.
- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.
- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.
- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.
- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.
- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).
- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).
- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).
- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).
- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).
- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).
- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.
- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.
- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.
- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.
- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.
- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.
- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.
- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).
- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.14768

Places