Skip to contentSkip to conversation

rdesktop: security bump to version 1.8.2

PATCH New Gustavo Zacarias 2 participants 2 messages May 23, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 rdesktop: security bump to version 1.8.2

Long overdue, fixes CVE-2008-1801, CVE-2008-1802, CVE-2008-1803 and CVE-2011-1595.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 ...-8bit-colors.patch => rdesktop-01-8bit-colors.patch} |  0
 package/rdesktop/rdesktop.mk                            | 17 +++++++++++++----
 2 files changed, 13 insertions(+), 4 deletions(-)
 rename package/rdesktop/{rdesktop-8bit-colors.patch => rdesktop-01-8bit-colors.patch} (100%)
package/rdesktop/rdesktop-01-8bit-colors.patch renamed from package/rdesktop/rdesktop-8bit-colors.patch +0 -0
similarity index 100%
rename from package/rdesktop/rdesktop-8bit-colors.patch
rename to package/rdesktop/rdesktop-01-8bit-colors.patch
package/rdesktop/rdesktop.mk +13 -4
index 94e0282..6829709 100644
@@ -4,11 +4,20 @@
 #
 ################################################################################
 
-RDESKTOP_VERSION = 1.5.0
+RDESKTOP_VERSION = 1.8.2
 RDESKTOP_SITE = http://downloads.sourceforge.net/project/rdesktop/rdesktop/$(RDESKTOP_VERSION)
-RDESKTOP_DEPENDENCIES = openssl xlib_libX11 xlib_libXt
-RDESKTOP_CONF_OPT = --with-openssl=$(STAGING_DIR)/usr
-RDESKTOP_LICENSE = GPLv2+ with exceptions
+RDESKTOP_DEPENDENCIES = host-pkgconf openssl xlib_libX11 xlib_libXt \
+	$(if $(BR2_PACKAGE_ALSA_LIB_PCM),alsa-lib) \
+	$(if $(BR2_PACKAGE_LIBAO),libao) \
+	$(if $(BR2_PACKAGE_LIBSAMPLERATE),libsamplerate)
+RDESKTOP_CONF_OPT = --with-openssl=$(STAGING_DIR)/usr --disable-credssp
+RDESKTOP_LICENSE = GPLv3+
 RDESKTOP_LICENSE_FILES = COPYING
 
+ifeq ($(BR2_PACKAGE_PCSC_LITE),y)
+RDESKTOP_DEPENDENCIES += pcsc-lite
+else
+RDESKTOP_CONF_OPT += --disable-smartcard
+endif
+
 $(eval $(autotools-package))
Signature · 1 line
1.8.5.5
#1 lore raw

PATCH 1/1 rdesktop: security bump to version 1.8.2

Quoted 6 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Long overdue, fixes CVE-2008-1801, CVE-2008-1802, CVE-2008-1803 and CVE-2011-1595.

Signed-off-by Gustavo Zacarias <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard