--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-11756
2015-07-17 23:28:49
--------------------------------------------------------------------------------

Name        : xrdp
Product     : Fedora 21
Version     : 0.6.1
Release     : 11.fc21
URL         : http://www.xrdp.org
Summary     : Open source remote desktop protocol (RDP) server
Description :
The goal of this project is to provide a fully functional Linux terminal
server, capable of accepting connections from rdesktop and Microsoft's own
terminal server / remote desktop clients.

--------------------------------------------------------------------------------
Update Information:

Attempt to fix this DoS.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jul 17 2015 Bojan Smojver  - 1:0.6.1-11
- attempt to fix bug #1194213
* Thu Jun  4 2015 Bojan Smojver  - 1:0.6.1-10
- remove -ac from X server calls: bug #1105202
- put other sesman.ini changes into a patch
* Fri May 15 2015 Bojan Smojver  - 1:0.6.1-9
- hopefully better service dependencies
* Thu Apr 23 2015 Dan Horák  - 1:0.6.1-8
- fix upgrade path after the 0.8 bump in 2014-09 by adding Epoch
* Mon Dec 22 2014 Bojan Smojver  - 0.6.1-7
- add a delay loop when connecting to VNC back end
* Mon Dec  8 2014 Bojan Smojver  - 0.6.1-6
- use systemd rpm macros: bug #850374
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1194213 - xrdp: denial of service when validating user accounts against plain passwd files/via shadow-utils
        https://bugzilla.redhat.com/show_bug.cgi?id=1194213
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update xrdp' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 21: xrdp Security Update

July 30, 2015
Attempt to fix this DoS.

Summary

The goal of this project is to provide a fully functional Linux terminal

server, capable of accepting connections from rdesktop and Microsoft's own

terminal server / remote desktop clients.

Update Information:

Attempt to fix this DoS.

Change Log

* Fri Jul 17 2015 Bojan Smojver - 1:0.6.1-11 - attempt to fix bug #1194213 * Thu Jun 4 2015 Bojan Smojver - 1:0.6.1-10 - remove -ac from X server calls: bug #1105202 - put other sesman.ini changes into a patch * Fri May 15 2015 Bojan Smojver - 1:0.6.1-9 - hopefully better service dependencies * Thu Apr 23 2015 Dan Horák - 1:0.6.1-8 - fix upgrade path after the 0.8 bump in 2014-09 by adding Epoch * Mon Dec 22 2014 Bojan Smojver - 0.6.1-7 - add a delay loop when connecting to VNC back end * Mon Dec 8 2014 Bojan Smojver - 0.6.1-6 - use systemd rpm macros: bug #850374

References

[ 1 ] Bug #1194213 - xrdp: denial of service when validating user accounts against plain passwd files/via shadow-utils https://bugzilla.redhat.com/show_bug.cgi?id=1194213

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xrdp' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : xrdp
Product : Fedora 21
Version : 0.6.1
Release : 11.fc21
URL : http://www.xrdp.org
Summary : Open source remote desktop protocol (RDP) server

Related News