Format: 1.8 Date: Tue, 23 Apr 2024 11:01:28 -0400 Source: freerdp2 Binary: freerdp2-dev freerdp2-shadow-x11 freerdp2-wayland freerdp2-x11 libfreerdp-client2-2 libfreerdp-server2-2 libfreerdp-shadow-subsystem2-2 libfreerdp-shadow2-2 libfreerdp2-2 libuwac0-0 libuwac0-dev libwinpr-tools2-2 libwinpr2-2 libwinpr2-dev winpr-utils Architecture: arm64 Version: 2.2.0+dfsg1-0ubuntu0.20.04.7 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: freerdp2-dev - Free Remote Desktop Protocol library (development files) freerdp2-shadow-x11 - FreeRDP x11 shadowing server freerdp2-wayland - RDP client for Windows Terminal Services (wayland client) freerdp2-x11 - RDP client for Windows Terminal Services (X11 client) libfreerdp-client2-2 - Free Remote Desktop Protocol library (client library) libfreerdp-server2-2 - Free Remote Desktop Protocol library (server library) libfreerdp-shadow-subsystem2-2 - FreeRDP Remote Desktop Protocol shadow subsystem libraries libfreerdp-shadow2-2 - FreeRDP Remote Desktop Protocol shadow libraries libfreerdp2-2 - Free Remote Desktop Protocol library (core library) libuwac0-0 - Using wayland as a client library libuwac0-dev - Using wayland as a client (development files) libwinpr-tools2-2 - Windows Portable Runtime Tools library libwinpr2-2 - Windows Portable Runtime library libwinpr2-dev - Windows Portable Runtime library (development files) winpr-utils - Windows Portable Runtime library command line utilities Changes: freerdp2 (2.2.0+dfsg1-0ubuntu0.20.04.7) focal-security; urgency=medium . * SECURITY UPDATE: integer overflow in freerdp_bitmap_planar_context_reset - debian/patches/CVE-2024-22211.patch: check resolution for overflow in libfreerdp/codec/planar.c. - CVE-2024-22211 * SECURITY UPDATE: out-of-bounds write and out-of-bounds read - debian/patches/CVE-2024-32039_41.patch: reorder check to prevent possible integer overflow in libfreerdp/codec/clear.c, libfreerdp/codec/zgfx.c. - CVE-2024-32039 - CVE-2024-32041 * SECURITY UPDATE: integer underflow in NSC codec - debian/patches/CVE-2024-32040.patch: abort if there are more bytes to be read then there are left in libfreerdp/codec/nsc.c. - CVE-2024-32040 * SECURITY UPDATE: out-of-bounds read - debian/patches/CVE-2024-32458.patch: fix missing input length checks in libfreerdp/codec/planar.c. - CVE-2024-32458 * SECURITY UPDATE: out-of-bounds read - debian/patches/CVE-2024-32459.patch: fix missing input length check in libfreerdp/codec/ncrush.c. - CVE-2024-32459 * SECURITY UPDATE: out-of-bounds read - debian/patches/CVE-2024-32460.patch: add checks to libfreerdp/codec/include/bitmap.c, libfreerdp/codec/interleaved.c. - CVE-2024-32460 Checksums-Sha1: 4da8112c61f33531375c88eb63fa3df088fbb810 108404 freerdp2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 34205c9ee9900f79e1fa3859b06a7d746e15c336 48904 freerdp2-shadow-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 8cba6e50ac471c86fdf24a138a5de19714aeb9d1 89944 freerdp2-wayland_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 7cf744ffa35b3cbd0030f8573b86a3502ceba671 256124 freerdp2-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb ee8b27b53aa77e796ae98e2564bdb5c9cddb0061 21482 freerdp2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.buildinfo 0ee6972a5297afd291ed060296d5753ab8898c9a 1043220 libfreerdp-client2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb d120df3183235fd49093df3d67488b64ce7f905a 406548 libfreerdp-server2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 2bab304eea8000d9fcc6408f5d06415c4a1445c6 70544 libfreerdp-shadow-subsystem2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 7f19b6664012562408a568dac5cfe38dd3058a62 154208 libfreerdp-shadow2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb dfb70988c56904bdd73f1e7dabc5931de46bc314 1866096 libfreerdp2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 5994d9b1698839831e95a5fd5fd2ab952cccb357 88812 libuwac0-0_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 784a6247fa7134b2927f8c24e70d6aec9c0b00f6 19772 libuwac0-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 6884369a448faac4075c9961bf730ad3fa26f87d 34224 libwinpr-tools2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb f324f880c47b7f998d962a0737234f3f70fac3dd 1007312 libwinpr2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb d324a5531f94a3a6a26195bee381d9d69a7fe84e 153304 libwinpr2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 6e1f62f405ec6e9b9eead4930f7eed74fed2b233 25132 winpr-utils_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb Checksums-Sha256: 0002934cd11df34891defabf3a157409bfb7ee9cd96bfc77464b2e8e42a2a57e 108404 freerdp2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 55fa0316efe3e08e11f8acb5a4770455aeda86742587e1e65bda5d9522fca09a 48904 freerdp2-shadow-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 6667107f8e00f84789cdea54a01c2a22c122197f30c1fbd4ebe1ca1874292cfa 89944 freerdp2-wayland_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 86cd48de084b80000d3915aabc3d9ba01d63afe458366b3d458e79d3f7178c18 256124 freerdp2-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 1072186e8ea387789fc7815188825a117b02a2e8d720936454f7da520eb6eb23 21482 freerdp2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.buildinfo d53b2fcfccbba686a6a96d19550d13ad0e589becac55a3a4c1d043f54858041f 1043220 libfreerdp-client2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 216faa4daa21791cfe2b863bf83e1c1437fa253aef3f9a6fa0e206b612579c8a 406548 libfreerdp-server2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 0dca0087438209a567f71f5e9f314fbf1c9dafd1d85131528f7e3303963c349d 70544 libfreerdp-shadow-subsystem2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 42937e760614e4cf53f894e29de7d4fda321b7e2a5bd44a4affe1806ba920342 154208 libfreerdp-shadow2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 6031c9df8033e887b7584d2be264e3536329add688187b8760b1da9d78a8cc20 1866096 libfreerdp2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb bbd2135040dc6eccd7ef43162c50c9b8af3132567af02d5af77ed0fa270f9795 88812 libuwac0-0_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb b5006b3f81490e772b86c5ae314ad9acb3aba598551bfcf7001bb119429fad6f 19772 libuwac0-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 08a6b1d7c1e36b82a0c2439f2e62f9c7eddf9c63cf8c1bbe49eeecb0a4fafa9b 34224 libwinpr-tools2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb f53b99bfa0e50bcd0c3fe61742332ec71792c6c4c73c3d8a479f593ff3e68651 1007312 libwinpr2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb bc5572115e2f53e7598bbc9d86da353803246344e8c7fa80004c474288b33881 153304 libwinpr2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 2ba127945e2ad3924c35d195d373c0e9875c22b15f7b952f9ea36f9fa105800a 25132 winpr-utils_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb Files: c8085977e3de98d7e516a6d1fa5773bb 108404 devel optional freerdp2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb e0a063eadda1f8b1d7274811397688b6 48904 x11 optional freerdp2-shadow-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb be0edbddfefdd036dd9be19522bed523 89944 x11 optional freerdp2-wayland_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb a7a9c9b7d8ae28cb27d921f3e685ca0e 256124 x11 optional freerdp2-x11_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb f4ceeb5c6a0ed6dad080c3bd51d23410 21482 x11 optional freerdp2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.buildinfo 0b34b5b16b9d2a8a1727898f60ca7bbd 1043220 libs optional libfreerdp-client2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb d50908b378c5858ea44c7ce75bfd90e6 406548 libs optional libfreerdp-server2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb bc473eab7ba21ccc941fa3e8466bfe87 70544 libs optional libfreerdp-shadow-subsystem2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 40482076672fd5aeb722ba1a60d9efc7 154208 libs optional libfreerdp-shadow2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 462b5d4f77230109ddce1eb7bc7e82d6 1866096 libs optional libfreerdp2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb a9014895d7fb56c477977fd5f609c3a3 88812 libs optional libuwac0-0_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 381709787cba3fa52662cd5357ffb518 19772 libdevel optional libuwac0-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb eb1104529850f2f05fe5b46a028b1b72 34224 libs optional libwinpr-tools2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb b8cdb7d2f57abf626f5debe3ef193834 1007312 libs optional libwinpr2-2_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 426fa72116cf263bff4b6e48e6670328 153304 libdevel optional libwinpr2-dev_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb 75819a3591770b709a6a27544e476aed 25132 utils optional winpr-utils_2.2.0+dfsg1-0ubuntu0.20.04.7_arm64.deb Original-Maintainer: Debian Remote Maintainers