gpp_maybe Security update for xrdp

SUSE-SLE-SERVER-12-SP5-2023-374

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306). - CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307). - CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310, bsc#1206621). - CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311). - CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312). - CVE-2022-23493: Fixed an out of bound read in xrdp_mm_trans_process_drdynvc_channel_close() (bsc#1206313).

• Release Date
  Feb 10 2023
• References
  Bugzilla: 1206303, 1206313, 1206306, 1206312, 1206311, 1206307, 1206302, 1206300, 1206310, 1206621
  CVEs: CVE-2022-23479, CVE-2022-23468, CVE-2022-23484, CVE-2022-23480, CVE-2022-23478, CVE-2022-23493, CVE-2022-23482, CVE-2022-23483, CVE-2022-23481
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  xrdp
  Remote desktop protocol (RDP) server

  0.9.10-3.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  xrdp
  Remote desktop protocol (RDP) server

  0.9.10-3.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  xrdp
  Remote desktop protocol (RDP) server

  0.9.10-3.8.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  xrdp
  Remote desktop protocol (RDP) server

  0.9.10-3.8.1

  lock rpm

  lock src