Summary
[1.3.1-3]
- Do not mention that display number is required in the file name
Resolves: bz#1195266
[1.3.1-2]
- Resolves: bz#1248422
CVE-2014-8240 CVE-2014-8241 tigervnc: various flaws
[1.3.1-1]
- Drop unecessary patches
- Re-base to 1.3.1 (bug #1199453)
- Re-build against re-based xserver (bug #1194898)
- Check the return value from XShmAttach (bug #1072733)
- Add missing part of xserver114.patch (bug #1140603)
- Keep pointer in sync (bug #1100661)
- Make input device class global (bug #1119640)
- Add IPv6 support (bug #1162722)
- Set initial mode as prefered (bug #1181287)
- Do not mention that display number is required in the file name (bug #1195266)
- Enable Xinerama extension (bug #1199437)
- Specify full path for runuser command (bug #1208817)
[1.2.80-0.31.20130314svn5065]
- Rebuilt against xorg-x11-server to pick up ppc64le fix (bug #1140424).
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | tigervnc | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-icons | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-license | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-server | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-server-applet | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-server-minimal | 0:1.3.1-3.el7 |
| Oracle Linux · 7 | tigervnc-server-module | 0:1.3.1-3.el7 |
Vulnerabilities 2
-
Unscored —
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitr…
-
Unscored —
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging fai…