shield Security update for freerdp

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4893

This update for freerdp fixes the following issues: - CVE-2023-39350: Fixed incorrect offset calculation leading to DoS (bsc#1214856). - CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX (bsc#1214857). - CVE-2023-39352: Fixed Invalid offset validation leading to Out Of Bound Write (bsc#1214858). - CVE-2023-39353: Fixed Missing offset validation leading to Out Of Bound Read (bsc#1214859). - CVE-2023-39354: Fixed Out-Of-Bounds Read in nsc_rle_decompress_data (bsc#1214860). - CVE-2023-39356: Fixed Missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (bsc#1214862). - CVE-2023-40181: Fixed Integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (bsc#1214863). - CVE-2023-40186: Fixed IntegerOverflow leading to Out-Of-Bound Write Vulnerability in gdi_CreateSurface (bsc#1214864). - CVE-2023-40188: Fixed Out-Of-Bounds Read in general_LumaToYUV444 (bsc#1214866). - CVE-2023-40567: Fixed Out-Of-Bounds Write in clear_decompress_bands_data (bsc#1214867). - CVE-2023-40569: Fixed Out-Of-Bounds Write in progressive_decompress (bsc#1214868). - CVE-2023-40574: Fixed Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX (bsc#1214869). - CVE-2023-40575: Fixed Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX (bsc#1214870). - CVE-2023-40576: Fixed Out-Of-Bounds Read in RleDecompress (bsc#1214871). - CVE-2023-40589: Fixed Global-Buffer-Overflow in ncrush_decompress (bsc#1214872).

• Release Date
  Dec 18 2023
• References
  Bugzilla: 1214864, 1214856, 1214863, 1214862, 1214872, 1214860, 1214867, 1214869, 1214868, 1214857, 1214866, 1214870, 1214871, 1214858, 1214859
  CVEs: CVE-2023-40181, CVE-2023-39356, CVE-2023-40186, CVE-2023-40188, CVE-2023-40576, CVE-2023-39352, CVE-2023-39353, CVE-2023-40589, CVE-2023-39354, CVE-2023-40569, CVE-2023-40567, CVE-2023-40574, CVE-2023-40575, CVE-2023-39350, CVE-2023-39351
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.4 ppc64le

• Packages
  freerdp
  Remote Desktop Viewer Client

  2.4.0-150400.3.23.1 lock rpm lock src

  freerdp-devel
  Development Files for freerdp

  2.4.0-150400.3.23.1 lock rpm

  freerdp-proxy
  Remote Desktop Security and Monitorig Proxy Server

  2.4.0-150400.3.23.1 lock rpm

  libfreerdp2
  Remote Desktop Viewer client library

  2.4.0-150400.3.23.1 lock rpm

  libwinpr2
  Windows Portable Runtime

  2.4.0-150400.3.23.1 lock rpm

  winpr2-devel
  Windows Portable Runtime development files

  2.4.0-150400.3.23.1 lock rpm

SUSE Package Hub 15.4 s390x

• Packages
  freerdp
  Remote Desktop Viewer Client

  2.4.0-150400.3.23.1 lock rpm lock src

  freerdp-devel
  Development Files for freerdp

  2.4.0-150400.3.23.1 lock rpm

  freerdp-proxy
  Remote Desktop Security and Monitorig Proxy Server

  2.4.0-150400.3.23.1 lock rpm

  libfreerdp2
  Remote Desktop Viewer client library

  2.4.0-150400.3.23.1 lock rpm

  libwinpr2
  Windows Portable Runtime

  2.4.0-150400.3.23.1 lock rpm

  winpr2-devel
  Windows Portable Runtime development files

  2.4.0-150400.3.23.1 lock rpm

SUSE Package Hub 15.4 aarch64

• Packages
  freerdp
  Remote Desktop Viewer Client

  2.4.0-150400.3.23.1 lock rpm lock src

  freerdp-devel
  Development Files for freerdp

  2.4.0-150400.3.23.1 lock rpm

  freerdp-proxy
  Remote Desktop Security and Monitorig Proxy Server

  2.4.0-150400.3.23.1 lock rpm

  libfreerdp2
  Remote Desktop Viewer client library

  2.4.0-150400.3.23.1 lock rpm

  libwinpr2
  Windows Portable Runtime

  2.4.0-150400.3.23.1 lock rpm

  winpr2-devel
  Windows Portable Runtime development files

  2.4.0-150400.3.23.1 lock rpm