Details: https://nvd.nist.gov/vuln/detail/CVE-2023-39350
Pick the patch that was identified[1] by Debian as the solution.
Note that the NVD report also references a commit as a patch - however
that seems to be incorrect. Although the NVD patch also solves a
vulnerability, it solves a different CVE (CVE-2023-39353), not this.
[1]: https://security-tracker.debian.org/tracker/CVE-2023-39350
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
=========
Noteworthy changes:
------------------
Decreased logging verbosity, now freerdp is much less verbose by default
Fixed issues:
--------------
Backported freerdp_abort_connect during freerdp_connect fix (#7700)
Backported improved version dection see docs/version_detection.md for details
Backported various rdpsnd fixes (#7695)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update FreeRDP to latest stable version, 2.5.0,
to pull in latest batch of bugfixes.
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Alexander Kanavin <alex@linutronix.de>
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The PCSC is used for smartcard forwarding, make this optional as
not all users need this functionality and it pulls in considerable
amount of dependencies. Keep this enabled by default to retain
backward compatibility.
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Alexander Kanavin <alex@linutronix.de>
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The freerdp does depend on libusb1 for rdpdr device forwarding.
This missing dependency is currently hidden, since it is pulled
in by pcsc-lite, but if the later is removed from DEPENDS, the
build fails. Add the missing dependency.
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Alexander Kanavin <alex@linutronix.de>
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade freerdp to latest stable 2.x version and drop
OpenSSL 3.x backports which are already upstream.
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Alexander Kanavin <alex@linutronix.de>
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Bump PE to prevent 'version-going-backwards (from 0:2.0.0-rc4-r0 to 0:2.0.0-r0)'
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
do_configure tests for wayland-scanner and silently drops the wayland
configure option if not found. Adding wayland-native to depends fixes
that.
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
1) Upgrade freerdp from 1.2.5 to 2.0.0.
2) Delete two patches for they are included in 2.0.0.
0001-FindGStreamer_1_0-fix-build-failure-for-new-gstreame.patch
0003-add-missing-define.patch
3) Add one patch 0001-Fix-gstreamer-1.0-detection.patch to fix the do_configure problem:
| -- Finding required feature XRandR for X11 randr (X11 randr extension)
| -- Found XRANDR: /yocto/work001/fnst/zrq/community/build_master/tmp/work/i586-poky-linux/freerdp/2.0.0+gitrAUTOINC+1648deb435-r0/recipe-sysroot/usr/lib/libXrandr.so
| CMake Error at channels/tsmf/client/gstreamer/CMakeLists.txt:21 (message):
| GStreamer library not found, but required for TSMF module.
4) Modify the do_install directory from winpr/tools/makecert/cli/ to winpr/tools/makecert-cli/
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* without x11, wayland, directfb enabled there is no bindir directory
so the error wasn't about empty /usr/bin/ being unpackaged, but there was
/usr/bin binary which was winpr-makecert installed above, fix by creating
the directory first
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* without x11 or wayland enabled from DISTRO_FEATURES there is nothing in
/usr/bin and this empty directory causes QA error
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* currently it's broken again
ERROR: freerdp-1.2.5+gitrAUTOINC+62da9d28c6-r0 do_package: QA Issue: freerdp: Files/directories were installed but not shipped in any package:
/usr/bin
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
freerdp: 1 installed and not shipped files. [installed-vs-shipped]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* otherwise the include path will miss sysroots/qemux86/usr/lib/gstreamer-1.0/include
* and build will fail like this:
In file included from /OE/build/oe-core/tmp-glibc/sysroots/qemux86/usr/include/gstreamer-1.0/gst/gstbin.h:27:0,
from /OE/build/oe-core/tmp-glibc/sysroots/qemux86/usr/include/gstreamer-1.0/gst/gst.h:35,
from /OE/build/oe-core/tmp-glibc/work/i586-oe-linux/freerdp/1.2.5+gitrAUTOINC+62da9d28c6-r0/git/channels/tsmf/client/gstreamer/tsmf_gstreamer.c:36:
/OE/build/oe-core/tmp-glibc/sysroots/qemux86/usr/include/gstreamer-1.0/gst/gstelement.h:55:27: fatal error: gst/gstconfig.h: No such file or directory
compilation terminated.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
We make the "freerdp" recipe active again, fix the build
by pulling a more recent version (the "stable" branches are
buggy and useless), and fix ARM runtime with -fPIC.
We can then :
- make X11 non-mandatory ;
- add support for Wayland ("wlfreerdp" client) ;
- add support for DirectFB ("dfreerdp" client) ;
- add support for GStreamer 1.0 ;
- make "heavy" features such as pulseaudio, cups...
non-mandatory.
We really want to install the "winpr-makecert" tool to have
TLS, but CMake does not position its RPATH cleanly, so let
us have a custom patch for that until it gets sorted out.
Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* until this is resolved:
freerdp-1.0.2+gitrAUTOINC+f311acaffb: freerdp: Files/directories were installed but not shipped
/usr/usr
/usr/usr/lib
/usr/usr/lib/freerdp
/usr/usr/lib/freerdp/printer.so
/usr/usr/lib/freerdp/rdpsnd.so
/usr/usr/lib/freerdp/rail.so
/usr/usr/lib/freerdp/rdpdr.so
/usr/usr/lib/freerdp/audin_alsa.so
/usr/usr/lib/freerdp/rdpsnd_pulse.so
/usr/usr/lib/freerdp/rdpdbg.so
/usr/usr/lib/freerdp/audin.so
/usr/usr/lib/freerdp/scard.so
/usr/usr/lib/freerdp/audin_pulse.so
/usr/usr/lib/freerdp/tsmf_alsa.so
/usr/usr/lib/freerdp/tsmf.so
/usr/usr/lib/freerdp/cliprdr.so
/usr/usr/lib/freerdp/parallel.so
/usr/usr/lib/freerdp/rdpsnd_alsa.so
/usr/usr/lib/freerdp/drdynvc.so
/usr/usr/lib/freerdp/tsmf_pulse.so
/usr/usr/lib/freerdp/serial.so
/usr/usr/lib/freerdp/disk.so
/usr/usr/lib/freerdp/.debug
/usr/usr/lib/freerdp/.debug/printer.so
/usr/usr/lib/freerdp/.debug/rail.so
/usr/usr/lib/freerdp/.debug/rdpsnd.so
/usr/usr/lib/freerdp/.debug/rdpdr.so
/usr/usr/lib/freerdp/.debug/audin_alsa.so
/usr/usr/lib/freerdp/.debug/rdpsnd_pulse.so
/usr/usr/lib/freerdp/.debug/rdpdbg.so
/usr/usr/lib/freerdp/.debug/audin.so
/usr/usr/lib/freerdp/.debug/scard.so
/usr/usr/lib/freerdp/.debug/audin_pulse.so
/usr/usr/lib/freerdp/.debug/tsmf_alsa.so
/usr/usr/lib/freerdp/.debug/tsmf.so
/usr/usr/lib/freerdp/.debug/cliprdr.so
/usr/usr/lib/freerdp/.debug/rdpsnd_alsa.so
/usr/usr/lib/freerdp/.debug/parallel.so
/usr/usr/lib/freerdp/.debug/drdynvc.so
/usr/usr/lib/freerdp/.debug/tsmf_pulse.so
/usr/usr/lib/freerdp/.debug/serial.so
/usr/usr/lib/freerdp/.debug/disk.so
* I've reported it mutiple times and nobody seems to care enough
to fix that, so maybe it's not used by anybody
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The 1.0 version of FreeRDP has change a lot and made the extension to
fail; as this extension has some limit usage (due some legal
interpretations) we stoped to support it upstream and in O.S. Systems.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
