Summary
[0.7.0-2]
- Fix reserved data size (rhbz #1416783)
- Fix inverted args in tests (rhbz #1416783)
- Avoid sign extension problems (rhbz #1416783)
- Fix crash with opening via GSocketAddress (rhbz #1416783)
- Fix crash & error reporting during connection timeout (rhbz #1441120)
- Fix incompatibility with libvncserver websockets (rhbz #921330)
[0.7.0-1]
- Update to 0.7.0 release (rhbz #1416783)
- Release held keys when loosing focus (rhbz #921008)
- Avoid warnings when disconnecting (rhbz #1126825)
- Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
- CVE-2017-5884 - fix bounds checking for RRE, hextile and
copyrect encodings (rhbz #1425367)
- CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gtk-vnc | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gtk-vnc-devel | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gtk-vnc-python | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gtk-vnc2 | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gtk-vnc2-devel | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gvnc | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gvnc-devel | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gvnc-tools | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gvncpulse | 0:0.7.0-2.el7 |
| Oracle Linux · 7 | gvncpulse-devel | 0:0.7.0-2.el7 |
Vulnerabilities 2
-
Unscored —
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers t…
-
Unscored —
Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc befo…