Path to this page:
Subject: CVS commit: pkgsrc/net/freerdp2
From: Mark Davies
Date: 2024-08-15 22:41:32
Message id: 20240815204132.C4B45FC74@cvs.NetBSD.org
Log Message:
freerdp2: update to 2.11.7
# 2024-04-22 Version 2.11.7
Noteworthy changes:
* Backported oss-fuzz fixes
# 2024-04-17 Version 2.11.6
CVE:
CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in
clear_decompress_residual_data
CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress
# 2024-01-19 Version 2.11.5
Noteworthy changes:
* Fix integer overflow in progressive decoder
* Update OpenSSL API usage for compatiblility with newer versions
* Prevent NULL dereference for single thread decoder
# 2023-12-14 Version 2.11.4
Notworthy changes:
* fix a typo in unicode commit
# 2023-12-14 Version 2.11.3
Notworthy changes:
* Disabled windows MEDIA FOUNDATION h264 decoder due to reported issues
* Fix issues with drive redirection
* Use endian safe ICU string converter
* Improve AAC support
* Fix swiss german keyboard layout
* Enable rfx-mode:image
# 2023-09-20 Version 2.11.2
Notworthy changes:
* backported wArrayList (optional) copy on insert
* backported certificate algorithm detection
# 2023-09-04 Version 2.11.1
Notworthy changes:
* Backported #9356: Fix issues with order updates
# 2023-08-28 Version 2.11.0
Noteworthy changes:
* Various input validation fixes
* Added various CMake options
* LibreSSL build fixes
Fixed issues:
* Backported: Big endian support
* Backported: Mouse grabbing support
* Backported: wayland scrolling fix
* Backported: Update h264 to use new FFMPEG API
* Backported: early bail from update_read_window_state_order breaks protocol
* Backported: rdpecam/server: Remove wrong assertion
* Backported: bounds checks for gdi/gfx rectangles
* Backported: enforce rdpdr client side state checks
* Backported: deactivate mouse grabbing by default
* Cherry-pick out of #9172: channels/cliprdr: Fix writing incorrect
PDU type for unlock PDUs
# 2023-02-16 Version 2.10.0
Noteworthy changes:
* Fix android build scripts, use CMake from SDK
* Fix connection negotiation with mstsc/msrdc
* [ntlm]: use rfc5929 binding hash algorithm
* [channels,printer] Fixed reference counting
* Fix uwac pixman
* Fix Rdp security
* [client,x11] Detect key autorepeat
* [build] add channel path to RPATH
* Fix build with BUILTIN_CHANNELS=OFF
* revert changes so that the osmajortype/osminortype is not overwritten
* [uwac] do not use iso C functions
* [winpr,sam] fix inalid NULL arguments
* Fix incompatible function pointer types
Fixed issues:
* Backported: Ignore data PDUs for DVCs that were not opened successfully
* Backported: [channel,urbdrc] fix type of usb hotplug callback
* Backported: Extended info enforce limits
* Backported: [core] add missing redirection fields
Files: