Skip to content
OpenAdvisories
Medium ELSA-2023-2257 6 CVEs

Moderate: tigervnc security and bug fix update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[1.12.0-13]
- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
Resolves: bz#2180309

[1.12.0-12]
- SELinux: allow vncsession create .vnc directory
Resolves: bz#2164703

[1.12.0-11]
- Add sanity check when cleaning up keymap changes
Resolves: bz#2169965

[1.12.0-10]
- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
Resolves: bz#2167061

[1.12.0-9]
- Rebuild for xorg-x11-server CVE-2022-46340 follow up fix

[1.12.0-8]
- Rebuild for xorg-x11-server CVEs
Resolves: CVE-2022-4283 (bz#2154234)
Resolves: CVE-2022-46340 (bz#2154221)
Resolves: CVE-2022-46341 (bz#2154224)
Resolves: CVE-2022-46342 (bz#2154226)
Resolves: CVE-2022-46343 (bz#2154228)
Resolves: CVE-2022-46344 (bz#2154230)

[1.12.0-7]
- x0vncserver: add new keysym in case we don't find matching keycode
+ actually apply the patch
Resolves: bz#2119017

[1.12.0-6]
- x0vncserver: add new keysym in case we don't find matching keycode
Resolves: bz#2119017

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 tigervnc 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-icons 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-license 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-selinux 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-server 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-server-minimal 0:1.12.0-13.el9_2
Oracle Linux · 9 tigervnc-server-module 0:1.12.0-13.el9_2

Vulnerabilities 6