Sync factory for CVE fixes. #1
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: pool/freerdp2#1
Reference in New Issue
Block a user
Delete Branch "yfjiang/freerdp2:leap-16.0"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
- Add freerdp-CVE-2023-40574-to-2023-40576.patch * Fix CVE-2023-40574 - bsc#1214869 Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX * Fix CVE-2023-40575 - bsc#1214870 Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX * Fix CVE-2023-40576 - bsc#1214871 Out-Of-Bounds Read in RleDecompress OBS-URL: https://build.opensuse.org/request/show/1144492 OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/freerdp2?expand=0&rev=4- Multiple CVE fixes + Add freerdp-CVE-2024-32659.patch (bsc#1223346, CVE-2024-32659) - out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` + Add freerdp-CVE-2024-32660.patch (bsc#1223347, CVE-2024-32660) - client crash via invalid huge allocation size + Add freerdp-CVE-2024-32661.patch (bsc#1223348, CVE-2024-32661) - client NULL pointer dereference + Add freerdp-CVE-2024-32658.patch (bsc#1223353, CVE-2024-32658) - out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients OBS-URL: https://build.opensuse.org/request/show/1176603 OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/freerdp2?expand=0&rev=13- Update to 2.11.7 + Backported oss-fuzz fixes - Update to 2.11.6 + CVE: * CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment * CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data * CVE-2024-32040 [Low] integer underflow in nsc_rle_decode * CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle * CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress * CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress + Noteworthy changes: * Backported #10077 - Remove these patches, applied upstream: + freerdp-CVE-2023-40574-to-2023-40576.patch + freerdp-CVE-2024-32658.patch + freerdp-CVE-2024-32659.patch + freerdp-CVE-2024-32660.patch - Add xfreerdp binary/man builds back with new name: xfreerdp2 OBS-URL: https://build.opensuse.org/request/show/1178791 OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/freerdp2?expand=0&rev=15Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@opensuse-review: approve.To request changes on behalf of the group, create the following comment:
@opensuse-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .
Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment:
@maintenance-release-review: approve.To request changes on behalf of the group, create the following comment:
@maintenance-release-review: declinefollowed with lines justifying the decision.Future edits of the comments are ignored, a new comment is required to change the review state.
Legal reviewed as acceptable_by_lawyer:
Build successful, for more information go in https://build.opensuse.org/project/show/openSUSE:Backports:SLE-16.0:PullRequest:492.
@opensuse-review : approve
LGTM
merge ok
mstrigl approved a review on behalf of opensuse-review
@maintenance-release-review: approve
rfrohl approved a review on behalf of maintenance-release-review