shield Security update for freerdp

SUSE-SLE-WE-12-SP1-2016-1462

This update for freerdp fixes the following issues: - CVE-2013-4118: Added a NULL pointer check to fix a server crash (bsc#829013). - CVE-2014-0791: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet. (bsc#857491) - CVE-2014-0250: Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allowed remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated. (bsc#880317)

• Release Date
  Oct 12 2016
• References
  Bugzilla: 857491, 880317, 829013
  CVEs: CVE-2013-4118, CVE-2014-0791, CVE-2014-0250
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 12.1 x86_64

• Packages
  freerdp
  Remote Desktop Viewer Client

  1.0.2-9.1

  lock rpm

  lock src

  libfreerdp-1_0
  Remote Desktop Viewer Library

  1.0.2-9.1

  lock rpm

  libfreerdp-1_0-plugins
  Plugins for libfreerdp-1_0

  1.0.2-9.1

  lock rpm