Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100

SUSE: 2022:4292-1 Moderate: Freerdp Input Buffer Issues

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for freerdp ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4292-1 Rating: moderate References: #1205563 #1205564 Cross-References: CVE-2022-39318 CVE-2022-39319 CVSS scores: CVE-2022-39318 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-39318 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H CVE-2022-39319 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-39319 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:H Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Workstation Extension 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for freerdp fixes the following issues: - CVE-2022-39318: Fixed division by zero in urbdrc (bsc#1205563). - CVE-2022-39319: Fixed missing input buffer length check in urbdrc (bsc#1205564). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in-t patch openSUSE-SLE-15.3-2022-4292=1 - SUSE Linux Enterprise Workstation Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-WE-15-SP3-2022-4292=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4292=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freerdp-2.1.2-150200.15.24.1 freerdp-debuginfo-2.1.2-150200.15.24.1 freerdp-debugsource-2.1.2-150200.15.24.1 freerdp-devel-2.1.2-150200.15.24.1 freerdp-proxy-2.1.2-150200.15.24.1 freerdp-proxy-debuginfo-2.1.2-150200.15.24.1 freerdp-server-2.1.2-150200.15.24.1 freerdp-server-debuginfo-2.1.2-150200.15.24.1 freerdp-wayland-2.1.2-150200.15.24.1 freerdp-wayland-debuginfo-2.1.2-150200.15.24.1 libfreerdp2-2.1.2-150200.15.24.1 libfreerdp2-debuginfo-2.1.2-150200.15.24.1 libuwac0-0-2.1.2-150200.15.24.1 libuwac0-0-debuginfo-2.1.2-150200.15.24.1 libwinpr2-2.1.2-150200.15.24.1 libwinpr2-debuginfo-2.1.2-150200.15.24.1 uwac0-0-devel-2.1.2-150200.15.24.1 winpr2-devel-2.1.2-150200.15.24.1 - SUSE Linux Enterprise Workstation Extension 15-SP3 (x86_64): freerdp-2.1.2-150200.15.24.1 freerdp-debuginfo-2.1.2-150200.15.24.1 freerdp-debugsource-2.1.2-150200.15.24.1 freerdp-devel-2.1.2-150200.15.24.1 freerdp-proxy-2.1.2-150200.15.24.1 freerdp-proxy-debuginfo-2.1.2-150200.15.24.1 libfreerdp2-2.1.2-150200.15.24.1 libfreerdp2-debuginfo-2.1.2-150200.15.24.1 libwinpr2-2.1.2-150200.15.24.1 libwinpr2-debuginfo-2.1.2-150200.15.24.1 winpr2-devel-2.1.2-150200.15.24.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x): freerdp-2.1.2-150200.15.24.1 freerdp-debuginfo-2.1.2-150200.15.24.1 freerdp-debugsource-2.1.2-150200.15.24.1 freerdp-devel-2.1.2-150200.15.24.1 freerdp-proxy-2.1.2-150200.15.24.1 freerdp-proxy-debuginfo-2.1.2-150200.15.24.1 libfreerdp2-2.1.2-150200.15.24.1 libfreerdp2-debuginfo-2.1.2-150200.15.24.1 libwinpr2-2.1.2-150200.15.24.1 libwinpr2-debuginfo-2.1.2-150200.15.24.1 winpr2-devel-2.1.2-150200.15.24.1 References: https://www.suse.com/security/cve/CVE-2022-39318.html https://www.suse.com/security/cve/CVE-2022-39319.html https://bugzilla.suse.com/1205563 https://bugzilla.suse.com/1205564 . SUSE Security Alert: freerdp has undergone an update to resolve moderate vulnerabilities. Ensure that you review your updates.. freerdp update, SUSE security, bug fix, Linux patch. . LinuxSecurity.com Team

Calendar 2 Nov 29, 2022 SuSE
98

Red Hat Enterprise Linux 8.4: RHSA-2021-4623 Important FreeRDP Memory Flaws

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: freerdp security update Advisory ID: RHSA-2021:4623-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:4623 Issue date: 2021-11-11 CVE Names: CVE-2021-41159 CVE-2021-41160 ==================================================================== 1. Summary: An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder EUS (v. 8.4) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream EUS (v.8.4) - aarch64, ppc64le, s390x, x86_64 3. Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159) * freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update,which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2016403 - CVE-2021-41159 freerdp: improper client input validation for gateway connections allows to overwrite memory 2016412 - CVE-2021-41160 freerdp: improper region checks in all clients allow out of bound write to memory 6. Package List: Red Hat Enterprise Linux AppStream EUS(v.8.4): Source: freerdp-2.2.0-6.el8_4.src.rpm aarch64: freerdp-2.2.0-6.el8_4.aarch64.rpm freerdp-debuginfo-2.2.0-6.el8_4.aarch64.rpm freerdp-debugsource-2.2.0-6.el8_4.aarch64.rpm freerdp-libs-2.2.0-6.el8_4.aarch64.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.aarch64.rpm libwinpr-2.2.0-6.el8_4.aarch64.rpm libwinpr-debuginfo-2.2.0-6.el8_4.aarch64.rpm libwinpr-devel-2.2.0-6.el8_4.aarch64.rpm ppc64le: freerdp-2.2.0-6.el8_4.ppc64le.rpm freerdp-debuginfo-2.2.0-6.el8_4.ppc64le.rpm freerdp-debugsource-2.2.0-6.el8_4.ppc64le.rpm freerdp-libs-2.2.0-6.el8_4.ppc64le.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.ppc64le.rpm libwinpr-2.2.0-6.el8_4.ppc64le.rpm libwinpr-debuginfo-2.2.0-6.el8_4.ppc64le.rpm libwinpr-devel-2.2.0-6.el8_4.ppc64le.rpm s390x: freerdp-2.2.0-6.el8_4.s390x.rpm freerdp-debuginfo-2.2.0-6.el8_4.s390x.rpm freerdp-debugsource-2.2.0-6.el8_4.s390x.rpm freerdp-libs-2.2.0-6.el8_4.s390x.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.s390x.rpm libwinpr-2.2.0-6.el8_4.s390x.rpm libwinpr-debuginfo-2.2.0-6.el8_4.s390x.rpm libwinpr-devel-2.2.0-6.el8_4.s390x.rpm x86_64: freerdp-2.2.0-6.el8_4.x86_64.rpm freerdp-debuginfo-2.2.0-6.el8_4.i686.rpm freerdp-debuginfo-2.2.0-6.el8_4.x86_64.rpm freerdp-debugsource-2.2.0-6.el8_4.i686.rpm freerdp-debugsource-2.2.0-6.el8_4.x86_64.rpm freerdp-libs-2.2.0-6.el8_4.i686.rpm freerdp-libs-2.2.0-6.el8_4.x86_64.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.i686.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.x86_64.rpm libwinpr-2.2.0-6.el8_4.i686.rpm libwinpr-2.2.0-6.el8_4.x86_64.rpm libwinpr-debuginfo-2.2.0-6.el8_4.i686.rpm libwinpr-debuginfo-2.2.0-6.el8_4.x86_64.rpm libwinpr-devel-2.2.0-6.el8_4.i686.rpm libwinpr-devel-2.2.0-6.el8_4.x86_64.rpm Red Hat CodeReady Linux Builder EUS (v.8.4): aarch64: freerdp-debuginfo-2.2.0-6.el8_4.aarch64.rpm freerdp-debugsource-2.2.0-6.el8_4.aarch64.rpm freerdp-devel-2.2.0-6.el8_4.aarch64.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.aarch64.rpm libwinpr-debuginfo-2.2.0-6.el8_4.aarch64.rpm ppc64le: freerdp-debuginfo-2.2.0-6.el8_4.ppc64le.rpm freerdp-debugsource-2.2.0-6.el8_4.ppc64le.rpm freerdp-devel-2.2.0-6.el8_4.ppc64le.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.ppc64le.rpm libwinpr-debuginfo-2.2.0-6.el8_4.ppc64le.rpm s390x: freerdp-debuginfo-2.2.0-6.el8_4.s390x.rpm freerdp-debugsource-2.2.0-6.el8_4.s390x.rpm freerdp-devel-2.2.0-6.el8_4.s390x.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.s390x.rpm libwinpr-debuginfo-2.2.0-6.el8_4.s390x.rpm x86_64: freerdp-debuginfo-2.2.0-6.el8_4.i686.rpm freerdp-debuginfo-2.2.0-6.el8_4.x86_64.rpm freerdp-debugsource-2.2.0-6.el8_4.i686.rpm freerdp-debugsource-2.2.0-6.el8_4.x86_64.rpm freerdp-devel-2.2.0-6.el8_4.i686.rpm freerdp-devel-2.2.0-6.el8_4.x86_64.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.i686.rpm freerdp-libs-debuginfo-2.2.0-6.el8_4.x86_64.rpm libwinpr-debuginfo-2.2.0-6.el8_4.i686.rpm libwinpr-debuginfo-2.2.0-6.el8_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-41159 https://access.redhat.com/security/cve/CVE-2021-41160 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYY0rA9zjgjWX9erEAQiy5g/8CNCLYh3rVAkWT9EIj7E7M+7D9x1xlmHX L2wJtozBus7rZlmFzI5388bnjhXWOban8Vg652GHeJBqgR5Dni4V4D7Y2Py1mtPD AuSVDnq2HKsu9Ia5OgmKQLtfhDKS5XXKpJoBAvwyyvB6B4ZzRMgOyHVbAhId6YzS negyZitiZo+KdGHw/l9iM6J0zLBny7B6sRuNCInuH5rzoleKcA/CKfouEOpWtGpF y6H06MM1ubW3bpmNA/cZURohagohx7cTjlS4hq807IJC9w6kejFUwtSMGRFH0FTr p0EMNg2V1UROcxeTuCky4Q27MHaJKZk3qVMNwBjaQDRq/EbzjJkLcWpu+BPyyfyF MYrA7a0SqE3XU2PtvUNQReQhyMJAhhmtdf7aNqEmmVfI85g95Cx1EaoaCMCXAKp2 4RJZrmY+d+dEDZzTywtOFaqEAGnhD2mgbXr4gf4c617o0x5LtphHgbBFAUQbTd7T 6qGj6AlEX+5knKccA8XPOenYeL3q0RXxH81WtApN/w/ZORSavFVsjKjWAmnJ3fRt 4ND3oPOlFebefOKGlNznidMFfh/buEjtettt1amWlwQAxs+EprCknzcpxiyHJ/Mj EasEafIePWPqeScEfCi/bAv50L/ltvyehNKtPk0g3ECnQMTok157U5vqB8WG0V67 P8cojOQczS0=jX1f -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial freeRDP patch released for Red Hat Enterprise Linux 8.4 tackling significant vulnerability concerns and potential memory exploitation threats.. freeRDP Update, Red Hat Security, Remote Desktop Protocol, RDP Memory Flaw, Enterprise Linux Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 11, 2021 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here