Linux · Security advisory · May 18, 2021

RHSA-2021:1849: Security update for 5 packages

RHSA-2021:1849, released May 18, 2021, fixes 8 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0213
82nd percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 0 Routine 8

Fixed package versions

ProductReleaseFixed in
freerdpRHEL 82:2.2.0-1.el8
freerdp-develRHEL 82:2.2.0-1.el8
freerdp-libsRHEL 82:2.2.0-1.el8
libwinprRHEL 82:2.2.0-1.el8
libwinpr-develRHEL 82:2.2.0-1.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-11099 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 6.5 0.0213 None reported
Routine CVE-2020-11096 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 6.5 0.0184 None reported
Routine CVE-2020-4033 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 6.5 0.0176 None reported
Routine CVE-2020-4030 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 6.5 0.0166 None reported
Routine CVE-2020-11098 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 6.5 0.0161 None reported
Routine CVE-2020-15103 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 3.5 0.0146 None reported
Routine CVE-2020-11095 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 5.4 0.0136 None reported
Routine CVE-2020-11097 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 5.4 0.0136 None reported
Showing 1 to 8 of 8 1