PT-2022-37631 · Dit+7 · Freerdp+17

Published 2022-08-25 · Updated 2022-08-25 · CVE-2022-41160

OSV

This update for freerdp fixes the following issues:

• CVE-2021-41159: Fixed improper validation of client input (bsc#1191895).
• CVE-2022-41160: Fixed improper region checks (bsc#1191895).

Related Identifiers

CVE-2022-41160

OPENSUSE-SU-2022_2891-1

SUSE-SU-2022:2890-1

SUSE-SU-2022:2891-1

Affected Products

Freerdp

Freerdp-Debuginfo

Freerdp-Debugsource

Freerdp-Devel

Freerdp-Proxy

Freerdp-Proxy-Debuginfo

Freerdp-Server

Freerdp-Server-Debuginfo

Freerdp-Wayland

Freerdp-Wayland-Debuginfo

Libfreerdp2

Libfreerdp2-Debuginfo

Libuwac0-0

Libuwac0-0-Debuginfo

Libwinpr2

Libwinpr2-Debuginfo

Uwac0-0-Devel

Winpr2-Devel

References · 11

• https://osv.dev/vulnerability/SUSE-SU-2022:2891-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2890-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05705 · Security Note
• https://suse.com/support/update/announcement/2022/suse-su-20222891-1 · Note
• https://suse.com/security/cve/CVE-2022-41160 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/4HM5PFQ4E25EQMBGYIQ3ET5QOHFTNCBY · Note
• https://suse.com/security/cve/CVE-2021-41159.html · Note
• https://suse.com/support/update/announcement/2022/suse-su-20222890-1 · Note
• https://suse.com/security/cve/CVE-2022-41160.html · Note
• https://bugzilla.suse.com/1191895 · Note
• https://suse.com/security/cve/CVE-2021-41159 · Note