Ubuntu
freerdp2 package

freerdp2 2.6.1+dfsg1-3ubuntu2.3 source package in Ubuntu

Changelog

freerdp2 (2.6.1+dfsg1-3ubuntu2.3) jammy-security; urgency=medium

  * SECURITY UPDATE: out of bounds read via parallel driver
    - debian/patches/CVE-2022-39282.patch: fix length checks in parallel
      driver in channels/parallel/client/parallel_main.c.
    - CVE-2022-39282
  * SECURITY UPDATE: out of bounds read via video channel
    - debian/patches/CVE-2022-39283.patch: fixed missing length check in
      video channel in channels/video/client/video_main.c.
    - CVE-2022-39283
  * SECURITY UPDATE: out of bounds reads in ZGFX decoder component
    - debian/patches/CVE-2022-39316_7.patch: added missing length checks in
      zgfx_decompress_segment in libfreerdp/codec/zgfx.c.
    - CVE-2022-39316
    - CVE-2022-39317
  * SECURITY UPDATE: missing input validation in urbdrc
    - debian/patches/CVE-2022-39318.patch: fixed division by zero in urbdrc
      in channels/urbdrc/client/libusb/libusb_udevice.c.
    - CVE-2022-39318
  * SECURITY UPDATE: missing input length validation in urbdrc
    - debian/patches/CVE-2022-39319-1.patch: fixed missing input buffer
      length check in urbdrc in channels/urbdrc/client/data_transfer.c.
    - debian/patches/CVE-2022-39319-2.patch: added missing length check in
      urb_control_transfer in channels/urbdrc/client/data_transfer.c.
    - CVE-2022-39319
  * SECURITY UPDATE: out of bounds read in usb
    - debian/patches/CVE-2022-39320.patch: ensure urb_create_iocompletion
      uses size_t for calculation in
      channels/urbdrc/client/data_transfer.c.
    - CVE-2022-39320
  * SECURITY UPDATE: missing path canonicalization and base path check
    for drive channel
    - debian/patches/CVE-2022-39347-1.patch: added function _wcsncmp in
      winpr/include/winpr/string.h, winpr/libwinpr/crt/string.c.
    - debian/patches/CVE-2022-39347-2.patch: fix wcs*cmp and wcs*len checks
      in winpr/libwinpr/crt/string.c.
    - debian/patches/CVE-2022-39347-3.patch: added wcsstr implementation in
      winpr/include/winpr/string.h, winpr/libwinpr/crt/string.c.
    - debian/patches/CVE-2022-39347-4.patch: fixed path validation in drive
      channel in channels/drive/client/drive_file.c,
      channels/drive/client/drive_file.h,
      channels/drive/client/drive_main.c.
    - CVE-2022-39347

 -- Marc Deslauriers <email address hidden>  Mon, 21 Nov 2022 08:52:19 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
x11
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freerdp2_2.6.1+dfsg1.orig.tar.xz 2.1 MiB c6464925966a4b5e24d44ddcda3d50fc3664219e5b278cdf60bbaee1879d70d3
freerdp2_2.6.1+dfsg1-3ubuntu2.3.debian.tar.xz 80.3 KiB e5f78629384986759ad4e47306d396856fa7eb36c2a1b7726401d78ce4bded44
freerdp2_2.6.1+dfsg1-3ubuntu2.3.dsc 3.5 KiB 42e802b956317438139aa1aed33df62b0247edeb4f173e01ad93f527af908b4b

View changes file

Binary packages built by this source

freerdp2-dev: Free Remote Desktop Protocol library (development files)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the FreeRDP development files.

freerdp2-shadow-x11: FreeRDP x11 shadowing server

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains a "shadowing" server that can be used to
 share an already started X11 DISPLAY.

freerdp2-shadow-x11-dbgsym: debug symbols for freerdp2-shadow-x11
freerdp2-wayland: RDP client for Windows Terminal Services (wayland client)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 Currently, the FreeRDP clients supports the following Windows Versions:
 .
  * Windows NT Server
  * Windows 2000 Terminal Server
  * Windows XP
  * Windows 2003 Server
  * Windows Vista
  * Windows 2008/2008r2/2011SBS Server
  * Windows 7
  * Windows 2012/2012r2 Server
  * Windows 8
  * Windows 10
 .
 This package contains the wayland based client.

freerdp2-wayland-dbgsym: debug symbols for freerdp2-wayland
freerdp2-x11: RDP client for Windows Terminal Services (X11 client)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 Currently, the FreeRDP client supports the following Windows Versions:
 .
  * Windows NT Server
  * Windows 2000 Terminal Server
  * Windows XP
  * Windows 2003 Server
  * Windows Vista
  * Windows 2008/2008r2/2011SBS Server
  * Windows 7
  * Windows 2012/2012r2 Server
  * Windows 8
  * Windows 10
 .
 This package contains the X11 based client.

freerdp2-x11-dbgsym: debug symbols for freerdp2-x11
libfreerdp-client2-2: Free Remote Desktop Protocol library (client library)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shared library for common client functionality.

libfreerdp-client2-2-dbgsym: debug symbols for libfreerdp-client2-2
libfreerdp-server2-2: Free Remote Desktop Protocol library (server library)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shared library with common server functionality.

libfreerdp-server2-2-dbgsym: debug symbols for libfreerdp-server2-2
libfreerdp-shadow-subsystem2-2: FreeRDP Remote Desktop Protocol shadow subsystem libraries

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shadow subsystem libraries.

libfreerdp-shadow-subsystem2-2-dbgsym: debug symbols for libfreerdp-shadow-subsystem2-2
libfreerdp-shadow2-2: FreeRDP Remote Desktop Protocol shadow libraries

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shadow libraries.

libfreerdp-shadow2-2-dbgsym: debug symbols for libfreerdp-shadow2-2
libfreerdp2-2: Free Remote Desktop Protocol library (core library)

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shared library with all core functionality.

libfreerdp2-2-dbgsym: debug symbols for libfreerdp2-2
libuwac0-0: Using wayland as a client library

 Using wayland as a client (uwac) is a library to provide common
 functionality for wayland clients.
 .
 This package contains the using wayland as a client library.

libuwac0-0-dbgsym: debug symbols for libuwac0-0
libuwac0-dev: Using wayland as a client (development files)

 Using wayland as a client (uwac) is a library to provide common
 functionality for wayland clients.
 .
 This package contains the libuwac development files

libwinpr-tools2-2: Windows Portable Runtime Tools library

 FreeRDP is a libre client/server implementation of the Remote
 Desktop Protocol (RDP).
 .
 This package contains the shared library for Windows Portable Runtime
 utilities and tools.

libwinpr-tools2-2-dbgsym: debug symbols for libwinpr-tools2-2
libwinpr2-2: Windows Portable Runtime library

 WinPR is a spin-off project of FreeRDP which aims at providing a portable
 implementation of important portions of the Windows API. Just like FreeRDP,
 WinPR is released under the Apache license. Unlike Wine, WinPR does not provide
 binary compatibility, and does not require applications to be built for
 Windows. Instead, WinPR provides API compatibility for applications targeting
 non-Windows environments. When on Windows, the original native API is being
 used instead of the equivalent WinPR implementation, without having to modify
 the code using it.
 .
 This package contains the WinPR shared library.

libwinpr2-2-dbgsym: debug symbols for libwinpr2-2
libwinpr2-dev: Windows Portable Runtime library (development files)

 WinPR is a spin-off project of FreeRDP which aims at providing a portable
 implementation of important portions of the Windows API. Just like FreeRDP,
 WinPR is released under the Apache license. Unlike Wine, WinPR does not provide
 binary compatibility, and does not require applications to be built for
 Windows. Instead, WinPR provides API compatibility for applications targeting
 non-Windows environments. When on Windows, the original native API is being
 used instead of the equivalent WinPR implementation, without having to modify
 the code using it.
 .
 This package contains the WinPR development files.

winpr-utils: Windows Portable Runtime library command line utilities

 WinPR is a spin-off project of FreeRDP which aims at providing a portable
 implementation of important portions of the Windows API. Just like FreeRDP,
 WinPR is released under the Apache license. Unlike Wine, WinPR does not provide
 binary compatibility, and does not require applications to be built for
 Windows. Instead, WinPR provides API compatibility for applications targeting
 non-Windows environments. When on Windows, the original native API is being
 used instead of the equivalent WinPR implementation, without having to modify
 the code using it.
 .
 This package contains WinPR command line utils (winpr-hash, winpr-makecert).

winpr-utils-dbgsym: debug symbols for winpr-utils