rdesktop: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2019.2288
           Multiple vulnerablities in rdesktop affects Debian 8
                               26 June 2019

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           rdesktop
Publisher:         Debian
Operating System:  Debian GNU/Linux 8
Impact/Access:     Execute Arbitrary Code/Commands -- Unknown/Unspecified
                   Denial of Service               -- Unknown/Unspecified
Resolution:        Patch/Upgrade

Original Bulletin: 
   https://lists.debian.org/debian-lts-announce/2019/06/msg00025.html

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : rdesktop
Version        : 1.8.6-0+deb8u1
Debian Bug     : 930387


Several security vulnerabilities were discovered in the rdesktop RDP
client, which could result in buffer overflows and execution of
arbitrary code.

For Debian 8 "Jessie", this problem has been fixed in version
1.8.6-0+deb8u1.

We recommend that you upgrade your rdesktop packages.


For the detailed security status of rdesktop please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/rdesktop

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


- - -- 
Jonas Meurer
- -----BEGIN PGP SIGNATURE-----
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=ocC1
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=yYZk
-----END PGP SIGNATURE-----