Fedora Linux 8784 Published by

A xrdp security update has been released for Fedora Linux 37.



[SECURITY] Fedora 37 Update: xrdp-0.9.23.1-1.fc37


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-c026222382
2023-10-06 00:50:52.919327
--------------------------------------------------------------------------------

Name : xrdp
Product : Fedora 37
Version : 0.9.23.1
Release : 1.fc37
URL : http://www.xrdp.org/
Summary : Open source remote desktop protocol (RDP) server
Description :
xrdp provides a fully functional RDP server compatible with a wide range
of RDP clients, including FreeRDP and Microsoft RDP client.

--------------------------------------------------------------------------------
Update Information:

Release notes for xrdp v0.9.23.1 (2023/09/27) This is a security fix release
for CVE-2023-42822. This update is recommended for all xrdp users. Security
fixes - CVE-2023-42822: Unchecked access to font glyph info
--------------------------------------------------------------------------------
ChangeLog:

* Thu Sep 28 2023 Bojan Smojver [bojan@rexursive.com] - 1:0.9.23.1-1
- Update to 0.9.23.1
- CVE-2023-42822
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2242232 - CVE-2023-42822 xrdp: Unchecked access to font glyph info [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2242232
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-c026222382' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------