MGASA-2024-0157

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2024-0157.html
Import Source
https://advisories.mageia.org/MGASA-2024-0157.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0157
Upstream
Published
2024-04-30T22:25:14Z
Modified
2026-04-16T00:12:22Z
Summary
Updated freerdp packages fix security vulnerabilities
Details

This release is a security release and addresses multiple issues: [Low] OutOfBound Read in zgfx_decompress_segment. [Moderate] Integer overflow & OutOfBound Write in clear_decompress_residual_data. [Low] integer underflow in nsc_rle_decode. [Low] OutOfBound Read in planar_skip_plane_rle. [Low] OutOfBound Read in ncrush_decompress. [Low] OutOfBound Read in interleaved_decompress.

References
Credits

Affected packages

Mageia:9 / freerdp

Package

Name
freerdp
Purl
pkg:rpm/mageia/freerdp?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.11.7-1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2024-0157.json"