CVE-2023-39350

This commit is contained in:
Tobias Frost 2023-10-03 10:07:13 +02:00
parent 0333c99067
commit b6e609f697
3 changed files with 3 additions and 4 deletions

3
debian/changelog vendored
View File

@ -14,8 +14,7 @@ freerdp2 (2.3.0+dfsg1-2~deb10u3) UNRELEASED; urgency=medium
CVE-2020-13397 CVE-2020-13398 and
CVE-2020-15103 (Closes: #965979)
* Backporting remaining issues: (Closes: #1051638)
CVE-2023-3950
CVE-2023-39350
-- Tobias Frost <tobi@debian.org> Mon, 02 Oct 2023 17:10:48 +0200

View File

@ -1,7 +1,7 @@
Description: Upstream fix for CVE-2023-39350 - Incorrect offset calculation leading to DOS
Origin: https://github.com/FreeRDP/FreeRDP/commit/e204fc8be5a372626b13f66daf2abafe71dbc2dc
Bug: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrrv-3w42-pffh
Bug-Vendor: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051638
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051638
From e204fc8be5a372626b13f66daf2abafe71dbc2dc Mon Sep 17 00:00:00 2001
From: Armin Novak <anovak@thincast.com>
Date: Sat, 5 Aug 2023 08:57:28 +0200

View File

@ -23,4 +23,4 @@
0034-Fixed-6938-Remote-app-mode-clipboard-fix.patch
0035-Fixed-6989-Use-X509_STORE_set_default_paths.patch
1001_keep-symbol-DumpThreadHandles-if-debugging-is-disabled.patch
0036-CVE-2023-3950.patch
0036-CVE-2023-39350.patch