bugtraq - [SECURITY] [DSA 4473-1] rdesktop security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 28 Jun 2019 15:17:45 +0000
From: Salvatore Bonaccorso <carnil@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4473-1] rdesktop security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4473-1                   security@...ian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
June 28, 2019                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : rdesktop
Debian Bug     : 930387

Multiple security issues were found in the rdesktop RDP client, which
could result in denial of service and the execution of arbitrary code.

For the stable distribution (stretch), this problem has been fixed in
version 1.8.6-2~deb9u1.

We recommend that you upgrade your rdesktop packages.

For the detailed security status of rdesktop please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/rdesktop

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=TJ9+
-----END PGP SIGNATURE-----