Summary
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
* xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | tigervnc | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-icons | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-license | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-selinux | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-server | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-server-minimal | 1.13.1-8.el9 |
| AlmaLinux · 9 | tigervnc-server-module | 1.13.1-8.el9 |
Vulnerabilities 2
-
High 7.0
Xorg-x11-server: use-after-free bug in damagedestroy
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a sc…
-
Medium 4.7
Xorg-x11-server: use-after-free bug in destroywindow
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on o…