PDA

View Full Version : [ubuntu] [SOLVED] rdesktop update



CyberDean
September 19th, 2008, 03:47 PM
On my Ubuntu server 8.04, I received 1 update, "rdesktop" RDP client for Windows NT/2000 Terminal Server (Size: 142 KB).

What is the purpose for this update on a Ubuntu server?

acidsolution
September 19th, 2008, 03:51 PM
well i think ubuntu shows the update of all the package available either installed or not in your computer.

Kevbert
September 19th, 2008, 03:51 PM
See this... (http://www.rdesktop.org/) It's built into the kernel so better safe than sorry to upgrade it.

iaculallad
September 19th, 2008, 03:53 PM
I just got my update a while ago. Below is an excerpt from Launchpad (https://launchpad.net/ubuntu/hardy/+source/rdesktop/1.5.0-3+cvs20071006ubuntu0.1).


Changelog

rdesktop (1.5.0-3+cvs20071006ubuntu0.1) hardy-security; urgency=low

* SECURITY UPDATE: fix integer overflow in iso.c that could cause denial
of service or possibly remote code execution
* SECURITY UPDATE: fix buffer overflow in rdp.c that could cause allow
remote code execution via redirect requests
* SECURITY UPDATE: fix integer signedness error that may allow remote
code execution via heap-based overflow
* References
CVE-2008-1801
CVE-2008-1802
CVE-2008-1803
LP: #228193

CyberDean
September 19th, 2008, 04:01 PM
Thanks to all, was not sure what it was about and I try to understand any updates.

Thanks again.