FreeRDP 2.1 has been updated to address 8 vulnerabilities.

Published new release of the project FreeRDP 2.1, offering an open-source implementation of the Remote Desktop Protocol RDP (Remote Desktop Protocol), developed based on specifications Microsoft. The project provides a library for integrating RDP support into third-party applications and a client that can be used to remotely connect to a Windows desktop. The project code is distributed under the Apache 2.0 license.

The new version adds new expert command-line options "/tune" and "/tune-list", through which you can change any client operation setting, extends filtering capabilities for USB devices, and has worked on bug fixes and resolved eight vulnerabilities. Five issues use the same name for can lead to crashes or data leaks due to reading from areas beyond the allocated buffer. One issue leads to an integer overflow. Three issues can cause buffer overflows in the cliprdr_server_receive_capabilities and URBDRC handlers.

Source: opennet.ru