From 5aee41fde3729c1c6bc19fa8b5a5c507622c68de7c54838cd0087d95e2f3b7aa Mon Sep 17 00:00:00 2001 From: Johannes Weberhofer Date: Tue, 23 Jun 2020 05:34:19 +0000 Subject: [PATCH] Accepting request 816403 from home:weberho:branches:X11:RemoteDesktop - Updated to release 2.1.2 * CVE-2020-4033 Out of bound read in RLEDECOMPRESS * CVE-2020-4031 Use-After-Free in gdi_SelectObject * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` * CVE-2020-4030 OOB read in `TrioParse` * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet * CVE-2020-11098 Out-of-bound read in glyph_cache_put * CVE-2020-11097 OOB read in ntlm_av_pair_get * CVE-2020-11095 Global OOB read in update_recv_primary_order * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order * Gateway RPC fixes for windows * Fixed resource fee race resulting in double free in USB redirection * Fixed wayland client crashes * Fixed X11 client mouse mapping issues (X11 mapping on/off) * Some proxy related improvements (capture module) * Code cleanup (use getlogin_r, ...) - Removed obsolete upstream patch freerdp-bug-6205.patch OBS-URL: https://build.opensuse.org/request/show/816403 OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/freerdp?expand=0&rev=104 --- FreeRDP-2.1.1.tar.gz | 3 --- FreeRDP-2.1.2.tar.gz | 3 +++ freerdp-bug-6205.patch | 31 ------------------------------- freerdp.changes | 22 ++++++++++++++++++++++ freerdp.spec | 4 +--- 5 files changed, 26 insertions(+), 37 deletions(-) delete mode 100644 FreeRDP-2.1.1.tar.gz create mode 100644 FreeRDP-2.1.2.tar.gz delete mode 100644 freerdp-bug-6205.patch diff --git a/FreeRDP-2.1.1.tar.gz b/FreeRDP-2.1.1.tar.gz deleted file mode 100644 index 336c5c1..0000000 --- a/FreeRDP-2.1.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ce363a6578530cf508df802bb980a8dd49a874919bfa33b8c61d992ad0882bfb -size 6828178 diff --git a/FreeRDP-2.1.2.tar.gz b/FreeRDP-2.1.2.tar.gz new file mode 100644 index 0000000..005fab4 --- /dev/null +++ b/FreeRDP-2.1.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9b4e49153808fa4ff149221f64957dfe6f2dcecd400e3e29979f8baf6712ed45 +size 6831602 diff --git a/freerdp-bug-6205.patch b/freerdp-bug-6205.patch deleted file mode 100644 index a09c2ee..0000000 --- a/freerdp-bug-6205.patch +++ /dev/null @@ -1,31 +0,0 @@ -From 5b842bc7a78621218b1179923c002d32c41f15fe Mon Sep 17 00:00:00 2001 -From: akallabeth -Date: Wed, 20 May 2020 11:57:01 +0200 -Subject: [PATCH] Read newline from stdio on certificate accept - ---- - client/common/client.c | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/client/common/client.c b/client/common/client.c -index 1f44da41a3..380d7de929 100644 ---- a/client/common/client.c -+++ b/client/common/client.c -@@ -467,14 +467,17 @@ static DWORD client_cli_accept_certificate(rdpSettings* settings) - { - case 'y': - case 'Y': -+ fgetc(stdin); - return 1; - - case 't': - case 'T': -+ fgetc(stdin); - return 2; - - case 'n': - case 'N': -+ fgetc(stdin); - return 0; - - default: diff --git a/freerdp.changes b/freerdp.changes index 8845d88..92a8716 100644 --- a/freerdp.changes +++ b/freerdp.changes @@ -1,3 +1,25 @@ +------------------------------------------------------------------- +Mon Jun 22 12:59:59 UTC 2020 - Johannes Weberhofer + +- Updated to release 2.1.2 + * CVE-2020-4033 Out of bound read in RLEDECOMPRESS + * CVE-2020-4031 Use-After-Free in gdi_SelectObject + * CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` + * CVE-2020-4030 OOB read in `TrioParse` + * CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet + * CVE-2020-11098 Out-of-bound read in glyph_cache_put + * CVE-2020-11097 OOB read in ntlm_av_pair_get + * CVE-2020-11095 Global OOB read in update_recv_primary_order + * CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order + * Gateway RPC fixes for windows + * Fixed resource fee race resulting in double free in USB redirection + * Fixed wayland client crashes + * Fixed X11 client mouse mapping issues (X11 mapping on/off) + * Some proxy related improvements (capture module) + * Code cleanup (use getlogin_r, ...) + +- Removed obsolete upstream patch freerdp-bug-6205.patch + ------------------------------------------------------------------- Wed May 20 15:14:52 UTC 2020 - Johannes Weberhofer diff --git a/freerdp.spec b/freerdp.spec index 17d57f0..aae9b7c 100644 --- a/freerdp.spec +++ b/freerdp.spec @@ -27,15 +27,13 @@ %define _lto_cflags %{nil} %endif Name: freerdp -Version: 2.1.1 +Version: 2.1.2 Release: 0 Summary: Remote Desktop Viewer Client License: Apache-2.0 Group: Productivity/Networking/Other URL: https://www.freerdp.com/ Source0: https://github.com/FreeRDP/FreeRDP/archive/%{version}.tar.gz#/FreeRDP-%{version}.tar.gz -# PATCH-FIX-UPSTREAM freerdp-bug-6205.patch gh#FreeRDP/FreeRDP#6205 -Patch0: freerdp-bug-6205.patch BuildRequires: chrpath BuildRequires: cmake >= 2.8 BuildRequires: cups-devel