Issued:
2020-06-04
Updated:
2020-06-04

RHSA-2020:2406 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c (CVE-2020-13398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64

Fixes

  • BZ - 1841199 - CVE-2020-13398 freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
freerdp-1.0.2-7.el6_10.src.rpm SHA-256: 20b82ecbb9e7ec1024bd22e6bf18c663d6a5fb97229232fc1c751493ae84438f
x86_64
freerdp-1.0.2-7.el6_10.x86_64.rpm SHA-256: 99e6f7eac3981aaaf69c84828b85f56bd86bc77d09f29770f8794019e2101e65
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-devel-1.0.2-7.el6_10.x86_64.rpm SHA-256: a506d21036a93c84de537cd440d11715b3c182e0cd67ef3841c6b84934c1af38
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-libs-1.0.2-7.el6_10.x86_64.rpm SHA-256: 872056e251cf06aabb50eb0a123cd32bc37f439ab1245bff8f180f22404a2955
freerdp-plugins-1.0.2-7.el6_10.x86_64.rpm SHA-256: 95c5736ee89153368572fa32810745d75ec979b774a182c6a178ba003d94c9b8
i386
freerdp-1.0.2-7.el6_10.i686.rpm SHA-256: c571d7a168875e8539da3ac50ab7a791fc40d9d6ffbfabfd12629f8f2cca7096
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-plugins-1.0.2-7.el6_10.i686.rpm SHA-256: ba09cffe9dbe81ef29c9f9bb7ad12fe9eac55f195fb4a97a84605481aa6a3a14

Red Hat Enterprise Linux Workstation 6

SRPM
freerdp-1.0.2-7.el6_10.src.rpm SHA-256: 20b82ecbb9e7ec1024bd22e6bf18c663d6a5fb97229232fc1c751493ae84438f
x86_64
freerdp-1.0.2-7.el6_10.x86_64.rpm SHA-256: 99e6f7eac3981aaaf69c84828b85f56bd86bc77d09f29770f8794019e2101e65
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-devel-1.0.2-7.el6_10.x86_64.rpm SHA-256: a506d21036a93c84de537cd440d11715b3c182e0cd67ef3841c6b84934c1af38
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-libs-1.0.2-7.el6_10.x86_64.rpm SHA-256: 872056e251cf06aabb50eb0a123cd32bc37f439ab1245bff8f180f22404a2955
freerdp-plugins-1.0.2-7.el6_10.x86_64.rpm SHA-256: 95c5736ee89153368572fa32810745d75ec979b774a182c6a178ba003d94c9b8
i386
freerdp-1.0.2-7.el6_10.i686.rpm SHA-256: c571d7a168875e8539da3ac50ab7a791fc40d9d6ffbfabfd12629f8f2cca7096
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-plugins-1.0.2-7.el6_10.i686.rpm SHA-256: ba09cffe9dbe81ef29c9f9bb7ad12fe9eac55f195fb4a97a84605481aa6a3a14

Red Hat Enterprise Linux Desktop 6

SRPM
freerdp-1.0.2-7.el6_10.src.rpm SHA-256: 20b82ecbb9e7ec1024bd22e6bf18c663d6a5fb97229232fc1c751493ae84438f
x86_64
freerdp-1.0.2-7.el6_10.x86_64.rpm SHA-256: 99e6f7eac3981aaaf69c84828b85f56bd86bc77d09f29770f8794019e2101e65
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-debuginfo-1.0.2-7.el6_10.x86_64.rpm SHA-256: 2b527bdb5e085e046870f42319327f76df4f180000bd256291574c907f0f887a
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-devel-1.0.2-7.el6_10.x86_64.rpm SHA-256: a506d21036a93c84de537cd440d11715b3c182e0cd67ef3841c6b84934c1af38
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-libs-1.0.2-7.el6_10.x86_64.rpm SHA-256: 872056e251cf06aabb50eb0a123cd32bc37f439ab1245bff8f180f22404a2955
freerdp-plugins-1.0.2-7.el6_10.x86_64.rpm SHA-256: 95c5736ee89153368572fa32810745d75ec979b774a182c6a178ba003d94c9b8
i386
freerdp-1.0.2-7.el6_10.i686.rpm SHA-256: c571d7a168875e8539da3ac50ab7a791fc40d9d6ffbfabfd12629f8f2cca7096
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-debuginfo-1.0.2-7.el6_10.i686.rpm SHA-256: 77998637e189300f41e08f0ad8bdbf177581504e089fd6754603d6153064b1aa
freerdp-devel-1.0.2-7.el6_10.i686.rpm SHA-256: 3f74fa7629bb5b52d4257dc44283db677082512c05238d4c4dd52e217031dbca
freerdp-libs-1.0.2-7.el6_10.i686.rpm SHA-256: 2c759f323939affc0f2f280f7213c693792eb91bc4a3b5b3eac6c3582594ef2c
freerdp-plugins-1.0.2-7.el6_10.i686.rpm SHA-256: ba09cffe9dbe81ef29c9f9bb7ad12fe9eac55f195fb4a97a84605481aa6a3a14

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
freerdp-1.0.2-7.el6_10.src.rpm SHA-256: 20b82ecbb9e7ec1024bd22e6bf18c663d6a5fb97229232fc1c751493ae84438f
s390x
freerdp-1.0.2-7.el6_10.s390x.rpm SHA-256: a07593f225c8a93cdeb80491cb6c0d99d241c6dfa037d4c8b7b7f27de25a9a01
freerdp-debuginfo-1.0.2-7.el6_10.s390.rpm SHA-256: 9ac0e3d45c683dc266d85f0999bde97cca2cd4b8835da718c5221e0afcaf00ed
freerdp-debuginfo-1.0.2-7.el6_10.s390x.rpm SHA-256: 5fab6e690d1c548898c02a8ff1ebdb2e5fc4ca3e4b14730d41a740d1b77f403e
freerdp-debuginfo-1.0.2-7.el6_10.s390x.rpm SHA-256: 5fab6e690d1c548898c02a8ff1ebdb2e5fc4ca3e4b14730d41a740d1b77f403e
freerdp-devel-1.0.2-7.el6_10.s390.rpm SHA-256: 935308cf3bc3eb7ab8eea8a4d6f0256f082aa6bcc6074e8a7417bd6b6b4d0ef2
freerdp-devel-1.0.2-7.el6_10.s390x.rpm SHA-256: 94e4a9f651e59e30c362987df2ef8ac4dd04fb40549c1b39fcbb5140f9f90924
freerdp-libs-1.0.2-7.el6_10.s390.rpm SHA-256: 37e268277308eca67f9dbc5d57455d86a71d905b7f10a89ddc24d2bfe66bcdb3
freerdp-libs-1.0.2-7.el6_10.s390x.rpm SHA-256: 44e360f16f4c1a748a21f5a776a14e2197300bebf0b79700bf24963c501c4fe4
freerdp-plugins-1.0.2-7.el6_10.s390x.rpm SHA-256: 7f3cd5c13351d2d4fb48830f4e42f6d817c855059bebcf6615332fda392ec431

Red Hat Enterprise Linux for Power, big endian 6

SRPM
freerdp-1.0.2-7.el6_10.src.rpm SHA-256: 20b82ecbb9e7ec1024bd22e6bf18c663d6a5fb97229232fc1c751493ae84438f
ppc64
freerdp-1.0.2-7.el6_10.ppc64.rpm SHA-256: 99d3405b326abdd4cdc0939e40cca4ea4629ad43d088b86eb7d05686b1ca8f02
freerdp-debuginfo-1.0.2-7.el6_10.ppc.rpm SHA-256: 4cc5fe13b910933b2b16006ab8cd95ab49e4d6a7d949c09c6d72a03874241506
freerdp-debuginfo-1.0.2-7.el6_10.ppc64.rpm SHA-256: ba5da95a3e38d9349f5f7a5137435374e59371f217aadf8162d672b4b9f3e8c3
freerdp-debuginfo-1.0.2-7.el6_10.ppc64.rpm SHA-256: ba5da95a3e38d9349f5f7a5137435374e59371f217aadf8162d672b4b9f3e8c3
freerdp-devel-1.0.2-7.el6_10.ppc.rpm SHA-256: baffdf4c0ce93d8653d5e372869e89b71375bdb99abe4a201eabe95a3f3a0df9
freerdp-devel-1.0.2-7.el6_10.ppc64.rpm SHA-256: e921f42bc1c8b3174e2d074eceeb1984b67230007e7d67c24eb5875aceb8b940
freerdp-libs-1.0.2-7.el6_10.ppc.rpm SHA-256: 834a91c3f71f0ba47208c3187ebf9b0cdaecd1126d8cb366076173164c90d3f3
freerdp-libs-1.0.2-7.el6_10.ppc64.rpm SHA-256: 1c5a30139fd011c53d83f8868238f87f0dd1899972373c6ecc89f55106ac3b20
freerdp-plugins-1.0.2-7.el6_10.ppc64.rpm SHA-256: f8414c23e4ac61fbae8e122423bf33c1ba2558c0762d49c043cdec7cfe100692

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.