freerdp (SL7)

Synopsis: Important: freerdp security update
Advisory ID: SLSA-2021:4619-1
Issue Date: 2021-11-12
CVE Numbers: CVE-2021-41159
CVE-2021-41160

Security Fix(es):

* freerdp: improper client input validation for gateway connections allows
to overwrite memory (CVE-2021-41159)

* freerdp: improper region checks in all clients allow out of bound write
to memory (CVE-2021-41160)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

SL7
x86_64
freerdp-2.1.1-5.el7_9.x86_64.rpm
freerdp-debuginfo-2.1.1-5.el7_9.i686.rpm
freerdp-debuginfo-2.1.1-5.el7_9.x86_64.rpm
freerdp-libs-2.1.1-5.el7_9.i686.rpm
freerdp-libs-2.1.1-5.el7_9.x86_64.rpm
libwinpr-2.1.1-5.el7_9.i686.rpm
libwinpr-2.1.1-5.el7_9.x86_64.rpm
freerdp-devel-2.1.1-5.el7_9.i686.rpm
freerdp-devel-2.1.1-5.el7_9.x86_64.rpm
libwinpr-devel-2.1.1-5.el7_9.i686.rpm
libwinpr-devel-2.1.1-5.el7_9.x86_64.rpm

– Scientific Linux Development Team