Summary
[2:3.10.3-5.3]
- Backport several CVE fixes
Resolves: RHEL-151975, RHEL-152202
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | freerdp | 2:3.10.3-5.el10_1.3 |
| Oracle Linux · 10 | freerdp-devel | 2:3.10.3-5.el10_1.3 |
| Oracle Linux · 10 | freerdp-libs | 2:3.10.3-5.el10_1.3 |
| Oracle Linux · 10 | freerdp-server | 2:3.10.3-5.el10_1.3 |
| Oracle Linux · 10 | libwinpr | 2:3.10.3-5.el10_1.3 |
| Oracle Linux · 10 | libwinpr-devel | 2:3.10.3-5.el10_1.3 |
Vulnerabilities 2
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an RDPGFX ClearCodec surface co…
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel` without verifying that `(nYDst+n…