Summary
[2:2.11.7-4]
- Backport several CVE fixes
Resolves: RHEL-151979, RHEL-152206
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | freerdp | 2:2.11.7-4.el8_10 |
| Oracle Linux · 8 | freerdp-devel | 2:2.11.7-4.el8_10 |
| Oracle Linux · 8 | freerdp-libs | 2:2.11.7-4.el8_10 |
| Oracle Linux · 8 | libwinpr | 2:2.11.7-4.el8_10 |
| Oracle Linux · 8 | libwinpr-devel | 2:2.11.7-4.el8_10 |
Vulnerabilities 2
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an RDPGFX ClearCodec surface co…
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel` without verifying that `(nYDst+n…