Fedora alert FEDORA-2015-11756 (xrdp)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 21 Update: xrdp-0.6.1-11.fc21 | |
| Date: | Thu, 30 Jul 2015 00:45:55 +0000 | |
| Message-ID: | <20150730004557.D2ECF605DFD3@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-11756 2015-07-17 23:28:49 -------------------------------------------------------------------------------- Name : xrdp Product : Fedora 21 Version : 0.6.1 Release : 11.fc21 URL : http://xrdp.sourceforge.net/ Summary : Open source remote desktop protocol (RDP) server Description : The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients. -------------------------------------------------------------------------------- Update Information: Attempt to fix this DoS. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 17 2015 Bojan Smojver <bojan@rexursive.com> - 1:0.6.1-11 - attempt to fix bug #1194213 * Thu Jun 4 2015 Bojan Smojver <bojan@rexursive.com> - 1:0.6.1-10 - remove -ac from X server calls: bug #1105202 - put other sesman.ini changes into a patch * Fri May 15 2015 Bojan Smojver <bojan@rexursive.com> - 1:0.6.1-9 - hopefully better service dependencies * Thu Apr 23 2015 Dan Horák <dan[at]danny.cz> - 1:0.6.1-8 - fix upgrade path after the 0.8 bump in 2014-09 by adding Epoch * Mon Dec 22 2014 Bojan Smojver <bojan@rexursive.com> - 0.6.1-7 - add a delay loop when connecting to VNC back end * Mon Dec 8 2014 Bojan Smojver <bojan@rexursive.com> - 0.6.1-6 - use systemd rpm macros: bug #850374 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1194213 - xrdp: denial of service when validating user accounts against plain passwd files/via shadow-utils https://bugzilla.redhat.com/show_bug.cgi?id=1194213 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xrdp' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...