Summary
[1.9.0-14]
- Bump build version
Resolves: bz#1819877
Resolves: bz#1819879
Resolves: bz#1819882
Resolves: bz#1819886
Resolves: bz#1819884
[1.9.0-13]
- Fix stack buffer overflow in CMsgReader::readSetCursor
Resolves: bz#1819877
- Fix heap buffer overflow in DecodeManager::decodeRect
Resolves: bz#1819879
- Fix heap buffer overflow in TightDecoder::FilterGradient
Resolves: bz#1819882
- Fix heap-based buffer overflow triggered from CopyRectDecoder
Resolves: bz#1819886
- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
Resolves: bz#1819884
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | tigervnc | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-icons | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-license | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-server | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-server-applet | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-server-minimal | 0:1.9.0-14.el8_1 |
| Oracle Linux · 8 | tigervnc-server-module | 0:1.9.0-14.el8_1 |
Vulnerabilities 5
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack …
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectD…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. E…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::de…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::read…