Opened 9 months ago

Closed 9 months ago

Last modified 8 months ago

#22666 closed enhancement (fixed)

FreeRDP-3.21.0

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor version.

Change History (6)

comment:1 by Bruce Dubbs, 9 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 9 months ago

3.21.0

Bugfix release with a few new API functions addressing shortcomings with regard to input data validation.

We have fixed the following additional (medium) client side vulnerabilities: 

    CVE-2026-23530
    CVE-2026-23531
    CVE-2026-23532
    CVE-2026-23533
    CVE-2026-23534
    CVE-2026-23732
    CVE-2026-23883
    CVE-2026-23884
  • [client,sdl] fix monitor resolution
  • [codec,progressive] fix progressive_rfx_upgrade_block
  • Krb cache fix
  • Rdpdr improved checks
  • Codec advanced length checks
  • Glyph fix length checks
  • Wlog printf format string checks
  • [warnings,format] fix format string warnings
  • Double free fixes
  • [clang-tidy] clean up code warnings

comment:3 by Bruce Dubbs, 9 months ago

Fixed at commit 7bd55f1ffe.

Leaving open for security advisory.

comment:4 by zeckma, 9 months ago

Priority: normal → elevated

I'll handle the SA.

comment:5 by zeckma, 9 months ago

Resolution: → fixed
Status: assigned → closed

SA-12.4-077 issued.

comment:6 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.