freerdp-2.0.0-4.rc4.el7

エラータID: AXSA:2020-105:02

Release date: 
Sunday, May 31, 2020 - 00:29
Subject: 
freerdp-2.0.0-4.rc4.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Out-of-bounds write in planar.c (CVE-2020-11521)

* freerdp: Integer overflow in region.c (CVE-2020-11523)

* freerdp: Out-of-bounds write in interleaved.c (CVE-2020-11524)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-11521
libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
CVE-2020-11523
libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
CVE-2020-11524
libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

Solution: 

Update packages.

CVEs: 
CVE-2020-11521
libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
CVE-2020-11523
libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
CVE-2020-11524
libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
Additional Info: 

N/A

Download: 

SRPMS
  1. freerdp-2.0.0-4.rc4.el7.src.rpm
    MD5: 8d3f0a18edd01b01df70cac857f4be08
    SHA-256: 8e8b5130df66190298021414ddbc09ecb1e79bb05a4f06f3fa500ef5ac3ec504
    Size: 6.32 MB

Asianux Server 7 for x86_64
  1. freerdp-2.0.0-4.rc4.el7.x86_64.rpm
    MD5: ffb65d73013a974126305674bf250b37
    SHA-256: 564a0bb2d32ee0806adff7d773e7f32f3361cf3d02032fd820a68d01cdb65a6c
    Size: 96.94 kB
  2. freerdp-libs-2.0.0-4.rc4.el7.x86_64.rpm
    MD5: 55ac6a3012699c6e3fbe8f79ff2b846d
    SHA-256: 1c0dbed6a29a2566e1fb6a784e46748d1ca7f7ec7e47de47e02f5d206aec4dad
    Size: 779.03 kB
  3. libwinpr-2.0.0-4.rc4.el7.x86_64.rpm
    MD5: 3ce0db0cd3488acb639639270b46b876
    SHA-256: 1e4976c554068415e51f1f52c00cc2a914a4ff767a3c97fe7e521a5f00de7a12
    Size: 321.27 kB
  4. libwinpr-devel-2.0.0-4.rc4.el7.x86_64.rpm
    MD5: 4c8ec003a1fa52ab59a24adc490e7a1b
    SHA-256: 754bccaaa97ee35bf2feac486d1347c78f58a8c5e345c83215e66c4ba989183b
    Size: 166.69 kB
  5. freerdp-libs-2.0.0-4.rc4.el7.i686.rpm
    MD5: d354da1a9dbc1dc2195141edd6720e5a
    SHA-256: 445420f7aecdc7601ab79437f74266c7987100444bbc656f91934012d29fcb29
    Size: 735.57 kB
  6. libwinpr-2.0.0-4.rc4.el7.i686.rpm
    MD5: ef63d9a2cfa69f5f707e0b2cebd46592
    SHA-256: 07c91f70f970e17d24106c20fae1dc60d7bd6c8edc7c41204bd7915c6b513afa
    Size: 311.62 kB
  7. libwinpr-devel-2.0.0-4.rc4.el7.i686.rpm
    MD5: 010c8a3c572d0a783abad740f97198da
    SHA-256: e763c8a23a513238ce608cccd9fa502a3e32f108d559aeaf2fd74f349ddc27a8
    Size: 166.72 kB