You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa xrdp

Sigurnosni nedostatak programskog paketa xrdp

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2020-9c26a458ae
2020-07-09 01:05:44.962901
——————————————————————————–

Name : xrdp
Product : Fedora 31
Version : 0.9.13.1
Release : 1.fc31
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.

——————————————————————————–
Update Information:

This is a security fix release that includes fixes for the following local
buffer overflow vulnerability. – CVE-2022-4044: Local users can perform a
buffer overflow attack against the xrdp-sesman service and then impersonate it
This update is recommended for all xrdp users.
——————————————————————————–
ChangeLog:

* Tue Jun 30 2020 Bojan Smojver <bojan@rexurive.com> – 1:0.9.13.1-1
– Bump up to 0.9.13.1
– CVE-2022-4044
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-9c26a458ae’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2020-9666e4c9cd
2020-07-09 01:04:26.797537
——————————————————————————–

Name : xrdp
Product : Fedora 32
Version : 0.9.13.1
Release : 1.fc32
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.

——————————————————————————–
Update Information:

This is a security fix release that includes fixes for the following local
buffer overflow vulnerability. – CVE-2022-4044: Local users can perform a
buffer overflow attack against the xrdp-sesman service and then impersonate it
This update is recommended for all xrdp users.
——————————————————————————–
ChangeLog:

* Tue Jun 30 2020 Bojan Smojver <bojan@rexurive.com> – 1:0.9.13.1-1
– Bump up to 0.9.13.1
– CVE-2022-4044
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-9666e4c9cd’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

AutorFilip Omazic
Cert idNCERT-REF-2020-07-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa cinder i programske biblioteke python-os-brick

Otkriven je sigurnosni nedostatak u programskom paketu cinder i programskoj biblioteci python-os-brick za operacijski sustav Ubuntu. Otkriveni nedostatak potencijalnom napadaču...

Close