RHSA-2023:2326-01 -- Redhat freerdp, libwinprID: oval:org.secpod.oval:def:507648 | Date: (C)2023-05-22 (M)2024-01-18 |
Class: PATCH | Family: unix |
FreeRDP is a free implementation of the Remote Desktop Protocol , released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix: * freerdp: clients using `/parallel` command line switch might read uninitialized data * freerdp: clients using the `/video` command line switch might read uninitialized data * freerdp: out of bounds read in zgfx decoder * freerdp: undefined behaviour in zgfx decoder * freerdp: division by zero in urbdrc channel * freerdp: missing length validation in urbdrc channel * freerdp: heap buffer overflow in urbdrc channel * freerdp: missing path sanitation with `drive` channel * freerdp: missing input length validation in `drive` channel For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.
Platform: |
Red Hat Enterprise Linux 9 |