Scientific Linux alert SLSA-2020:2334-1 (freerdp)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
scientific-linux-errata@listserv.fnal.gov 
Subject:
             
 
Security ERRATA Important: freerdp on SL7.x x86_64 
Date:
             
 
Mon, 01 Jun 2020 12:38:28 -0000
Message-ID:
             
 
<20200601123828.22427.68973@slpackages.fnal.gov>
Synopsis:          Important: freerdp security update
Advisory ID:       SLSA-2020:2334-1
Issue Date:        2020-05-28
CVE Numbers:       None
--

Security Fix(es):

* freerdp: Out-of-bounds write in planar.c (CVE-2020-11521)

* freerdp: Integer overflow in region.c (CVE-2020-11523)

* freerdp: Out-of-bounds write in interleaved.c (CVE-2020-11524)
--

SL7
  x86_64
    freerdp-2.0.0-4.rc4.el7_8.x86_64.rpm
    freerdp-debuginfo-2.0.0-4.rc4.el7_8.i686.rpm
    freerdp-debuginfo-2.0.0-4.rc4.el7_8.x86_64.rpm
    freerdp-libs-2.0.0-4.rc4.el7_8.i686.rpm
    freerdp-libs-2.0.0-4.rc4.el7_8.x86_64.rpm
    libwinpr-2.0.0-4.rc4.el7_8.i686.rpm
    libwinpr-2.0.0-4.rc4.el7_8.x86_64.rpm
    freerdp-devel-2.0.0-4.rc4.el7_8.i686.rpm
    freerdp-devel-2.0.0-4.rc4.el7_8.x86_64.rpm
    libwinpr-devel-2.0.0-4.rc4.el7_8.i686.rpm
    libwinpr-devel-2.0.0-4.rc4.el7_8.x86_64.rpm

- Scientific Linux Development Team