[SECURITY] Fedora 33 Update: guacamole-server-1.2.0-3.fc33
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-640645e518
2021-01-04 01:05:53.142327
--------------------------------------------------------------------------------
Name : guacamole-server
Product : Fedora 33
Version : 1.2.0
Release : 3.fc33
URL : http://guac-dev.org/
Summary : Server-side native components that form the Guacamole proxy
Description :
Guacamole is an HTML5 remote desktop gateway.
Guacamole provides access to desktop environments using remote desktop protocols
like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing
access to multiple desktops through a web browser.
No browser plugins are needed, and no client software needs to be installed. The
client requires nothing more than a web browser supporting HTML5 and AJAX.
The main web application is provided by the "guacamole-client" package.
--------------------------------------------------------------------------------
Update Information:
Updated SPEC file and rebuilt for new dependencies.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 26 2020 Simone Caronni <negativo17(a)gmail.com> - 1.2.0-3
- Do not ship deprecated sysconfig file.
- Trim changelog.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1853386 - CVE-2020-9498 guacamole-server: Dangling pointer in RDP static
virtual channel handling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1853386
[ 2 ] Bug #1853388 - CVE-2020-9498 guacamole-server: Dangling pointer in RDP static
virtual channel handling [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1853388
[ 3 ] Bug #1853391 - CVE-2020-9497 guacamole-server: Improper input validation of RDP
static virtual channels [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1853391
[ 4 ] Bug #1853393 - CVE-2020-9497 guacamole-server: Improper input validation of RDP
static virtual channels [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1853393
[ 5 ] Bug #1878395 - F34FailsToInstall: libguac-client-kubernetes
https://bugzilla.redhat.com/show_bug.cgi?id=1878395
[ 6 ] Bug #1899751 - Dependency error installing libguac-client-kubernetes
https://bugzilla.redhat.com/show_bug.cgi?id=1899751
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-640645e518' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------