ELSA-2020-2334

ELSA-2020-2334 - freerdp security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-06-05

Description

[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)

Related CVEs

CVE-2020-11523

CVE-2020-11524

CVE-2020-11521

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	freerdp-2.0.0-4.rc4.el7_8.src.rpm	4a1883ca23b05e309bb0e4ea7d52ea81	ELSA-2020-4031
	freerdp-2.0.0-4.rc4.el7_8.aarch64.rpm	61b612ee3b307a7c3336c6a4a5b51b1a	ELSA-2020-4031
	freerdp-devel-2.0.0-4.rc4.el7_8.aarch64.rpm	59ccd3369685f14e06c51b4768c0f0d2	ELSA-2020-4031
	freerdp-libs-2.0.0-4.rc4.el7_8.aarch64.rpm	2b615328e277c92611c8b7107e0b1bc4	ELSA-2020-4031
	libwinpr-2.0.0-4.rc4.el7_8.aarch64.rpm	4402495ba4d74d7636f03673f7e5d3eb	ELSA-2020-4031
	libwinpr-devel-2.0.0-4.rc4.el7_8.aarch64.rpm	6bb3c60e9ece5ec25d07f8e010efae9e	ELSA-2020-4031
Oracle Linux 7 (x86_64)	freerdp-2.0.0-4.rc4.el7_8.src.rpm	4a1883ca23b05e309bb0e4ea7d52ea81	ELSA-2020-4031
	freerdp-2.0.0-4.rc4.el7_8.x86_64.rpm	8321be553f1fa00a4963d5da384932ad	ELSA-2020-4031
	freerdp-devel-2.0.0-4.rc4.el7_8.i686.rpm	35dba83ff8bc952c8c9f1f7846bbf236	ELSA-2020-4031
	freerdp-devel-2.0.0-4.rc4.el7_8.x86_64.rpm	aedd71557767a5db3e76d8972a72dad6	ELSA-2020-4031
	freerdp-libs-2.0.0-4.rc4.el7_8.i686.rpm	81f8f639642a4903418fd1c67b615c69	ELSA-2020-4031
	freerdp-libs-2.0.0-4.rc4.el7_8.x86_64.rpm	c36024fa222a2fea57017882ab05c7b8	ELSA-2020-4031
	libwinpr-2.0.0-4.rc4.el7_8.i686.rpm	bd7e419715f1a08835da533d2eb1e382	ELSA-2020-4031
	libwinpr-2.0.0-4.rc4.el7_8.x86_64.rpm	b15792277abe3f34793937ba01208e5e	ELSA-2020-4031
	libwinpr-devel-2.0.0-4.rc4.el7_8.i686.rpm	6353fb928202c5e109f9c186000f2357	ELSA-2020-4031
	libwinpr-devel-2.0.0-4.rc4.el7_8.x86_64.rpm	904481c2b62ae7d21173537d41846b7d	ELSA-2020-4031

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team