Upstream fix identified and released — pending Ubuntu update to 3.32.1
This bug is a duplicate of upstream
https://github.com/FreeRDP/FreeRDP/issues/13486 (my own report
was https://github.com/FreeRDP/FreeRDP/issues/13554, now closed as duplicate).
Root cause (confirmed upstream, not the X11 clipboard atom changes initially
suspected): commit
ead997147 ("[channels] allocate buffer only for data received", from #13464, a
security hardening
change in 3.32.0) sized the static channel reassembly stream to dataLength
(the current chunk)
instead of totalLength (the whole PDU) in channels/client/addin.c. Any
clipboard
CB_FORMAT_DATA_RESPONSE larger than one chunk then fails the final capacity
check, logs
cliprdr_plugin_process_received: read error (ERROR_INTERNAL_ERROR 1359), and
the client disconnects
— which is exactly the session drop + broken remote→local clipboard sync
described here.
Fix: PR https://github.com/FreeRDP/FreeRDP/pull/13487, released in FreeRDP
3.32.1
(https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.1), whose release notes
explicitly state:
"fragmented static channel PDU were rejected breaking copy & paste for larger
data".
Request: please update freerdp3 in noble-updates to 3.32.1. This is not only
the fix for this
regression but also a security release (3.32.1 fixes several CVEs, e.g.
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qqc-m43j-g4r2).
Until then, the workaround is to keep 3.31.0+dfsg-0ubuntu0.24.04.1 (debs still
available in the
Ubuntu pool), which fully resolves the issue.
** Tags added: regression-update
** Bug watch added: freerdp-issues #13486
https://github.com/FreeRDP/FreeRDP/issues/13486
** CVE added: https://github.com/advisories/GHSA-9qqc-m43j-g4r2
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2168845
Title:
FreeRDP 3.32.0 regression: copying on the remote Windows desktop drops
the RDP session and breaks clipboard sync (worked in 3.31.0)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freerdp3/+bug/2168845/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
