-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 11 Sep 2017 06:23:17 +0200 Source: freerdp Binary: freerdp-dbg freerdp-x11 libfreerdp1 libfreerdp-plugins-standard libfreerdp-dev Architecture: source amd64 Version: 1.0.1-1.1+deb7u4 Distribution: wheezy-security Urgency: high Maintainer: Mike Gabriel <sunweaver@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: freerdp-dbg - RDP client for Windows Terminal Services (debug) freerdp-x11 - RDP client for Windows Terminal Services libfreerdp-dev - RDP client for Windows Terminal Services (development) libfreerdp-plugins-standard - RDP client for Windows Terminal Services (plugins) libfreerdp1 - RDP client for Windows Terminal Services (library) Changes: freerdp (1.0.1-1.1+deb7u4) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-2835, CVE-2017-2836, CVE-2017-2837, CVE-2017-2838, CVE-2017-2839. * Tyler Bohan of Talos discovered that FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), contained several vulnerabilities that allowed a malicious remote server or a man-in-the-middle to either cause a DoS by forcibly terminating the client, or execute arbitrary code on the client side. Checksums-Sha1: 387d524eeec72d8e1343f29faab9f0c5011cd92c 2543 freerdp_1.0.1-1.1+deb7u4.dsc 06a9a0ff033f7e0b9fefc6f332324c0e63cce862 3492793 freerdp_1.0.1.orig.tar.gz 20f88edfee53d12077389be1136a1f3dd7f49a01 17518 freerdp_1.0.1-1.1+deb7u4.debian.tar.gz 8e18aa00fc76973096184696f97219939ac24d21 1741352 freerdp-dbg_1.0.1-1.1+deb7u4_amd64.deb c90b8fdb968c48a04d47f739b079c1899da6bb2f 53300 freerdp-x11_1.0.1-1.1+deb7u4_amd64.deb af7e579c231e873b6d57d4e64e41ab4e21fa4c65 261556 libfreerdp1_1.0.1-1.1+deb7u4_amd64.deb d685b4eb448cbb8516ecc8b9dda3674910e87961 86662 libfreerdp-plugins-standard_1.0.1-1.1+deb7u4_amd64.deb e00e1e7c2192566285e6d1e02e361c9ca750bfd8 56800 libfreerdp-dev_1.0.1-1.1+deb7u4_amd64.deb Checksums-Sha256: f2878defabf81fba7f56a4090b74a457f7d459e83e728039abb4918266b72e56 2543 freerdp_1.0.1-1.1+deb7u4.dsc 5f758a3292a00e3d24a5c35126a7212c40970df40bb22430c9e0b726ce4fbfa6 3492793 freerdp_1.0.1.orig.tar.gz a2eda6ec463d07f08647aecd87226904a1bd351856786500839ffc8e445721d3 17518 freerdp_1.0.1-1.1+deb7u4.debian.tar.gz 290a5531de897eaf8eb20793d37a03c6aac9b6152217d1ff40850527dcae211a 1741352 freerdp-dbg_1.0.1-1.1+deb7u4_amd64.deb 2a9da908c2ba27951857eeabf8611e4119afcf097a5890956dde34b94b78b438 53300 freerdp-x11_1.0.1-1.1+deb7u4_amd64.deb b2521c9afd5ede27630009dad652d69b6a9f8a1b13683c9e0f9521d5ca6b8194 261556 libfreerdp1_1.0.1-1.1+deb7u4_amd64.deb bc9c3d08af56e4d685b6e29fe6e2f9a2e24dac251ec0d711cce1ef16c88c9319 86662 libfreerdp-plugins-standard_1.0.1-1.1+deb7u4_amd64.deb d093e8c78b7c5c4564d72655941f069dcbdbf4135e3523f297254516d621f046 56800 libfreerdp-dev_1.0.1-1.1+deb7u4_amd64.deb Files: 57fa98ab68b6511fef7479d962128dab 2543 x11 optional freerdp_1.0.1-1.1+deb7u4.dsc f96eb528818bc5dd4bd48c4fcb876066 3492793 x11 optional freerdp_1.0.1.orig.tar.gz e6f578043ae36775151dd55baf9c7ef4 17518 x11 optional freerdp_1.0.1-1.1+deb7u4.debian.tar.gz 5ae51d37d0646cbced0d3391eb084bc5 1741352 debug extra freerdp-dbg_1.0.1-1.1+deb7u4_amd64.deb 30dece9bcabf230e6c3fe28b628ca9b9 53300 x11 optional freerdp-x11_1.0.1-1.1+deb7u4_amd64.deb 75bedcf5ad728519e531b15cf52c95b6 261556 libs optional libfreerdp1_1.0.1-1.1+deb7u4_amd64.deb 48132eee7c9238d2609110da8050d916 86662 libs optional libfreerdp-plugins-standard_1.0.1-1.1+deb7u4_amd64.deb b475584bbeff53210ad2bed24d127f29 56800 libdevel optional libfreerdp-dev_1.0.1-1.1+deb7u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlm2E4VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk9xIP/1lk47/fe44rceqHGjCcZMPFTKQx2sOaoYao dZmCRSxXfuZSte9/cynRv5+B3SqW1TnjvIkyM+VmpcAAEQLtnF1T8ga8DGQHmutt mxJJGR53F+pPJcnlNwM8Oy6ulnRdiDqJ9HZY1U77ABl38qQYy0RA8SqrmU9EH+oq dJJchakhQhs2SnI1MpPqbNr9w0DWwuXjTgQ4oKqZC6L6n2SEiqAkephvHAA3Flya FsmhmOCQuNJoRxOOhfWvpKgzfubRR24rrcDiWm0V03z2iV+0317EFCBqQo1f9bTY XC8Y1rKQSxsGrRX7YiDL7ZGioxHRQMQ5YncGA2+lAQ++ymkXsk9iRGZ/M7qUfgqa z3TDdwqh2+/KLupaLd/XCXkB0icbpKM2VzY2MWewuk5yhC4mhZytekBcpeCcs9s4 Ds/S0gtCplIWqHxnDMSJ7Mg1JnVs7KSHOdTzD6ETQmoNdyJ24n4ygUOyv/x5xLJy 8ae99P8BBBna2SHsuzBzK+IarQcdcI9LkmzKnZfHAX6QsjlTZ/WSfsRo0uedyhX4 IVrYnZQ8SatDgzXXtQHJ4cfuRmZag1FkteoLo3hKT5YdGGs8NlfTZcMIH5EmxZP5 A1ca0HZQZoEPL2bMUetkKVpvoRFKqGhfZeKBF92yJV0bI/XtmhVpt2MEZqUFH/v1 I6aPO88/ =hLgT -----END PGP SIGNATURE-----