ELSA-2023-2830 — Moderate: tigervnc security and bug fix update (Oracle Linux 8)

Summary

[1.12.0-15]
- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
Resolves: bz#2180305

[1.12.0-14]
- SELinux: allow vncsession create .vnc directory
Resolves: bz#2164704

[1.12.0-13]
- Add sanity check when cleaning up keymap changes
Resolves: bz#2169960

[1.12.0-12]
- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
Resolves: bz#2167058

[1.12.0-11]
- Rebuild for xorg-x11-server CVE-2022-46340 follow up fix

[1.12.0-10]
- Rebuild for xorg-x11-server CVEs
Resolves: CVE-2022-4283 (bz#2154233)
Resolves: CVE-2022-46340 (bz#2154220)
Resolves: CVE-2022-46341 (bz#2154223)
Resolves: CVE-2022-46342 (bz#2154225)
Resolves: CVE-2022-46343 (bz#2154227)
Resolves: CVE-2022-46344 (bz#2154229)

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	tigervnc	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-icons	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-license	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-selinux	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-server	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-server-minimal	0:1.12.0-15.el8_8
Oracle Linux · 8	tigervnc-server-module	0:1.12.0-15.el8_8

Vulnerabilities 6

High 8.8

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request o…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022
High 8.8

CVE-2022-46341

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request acces…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022
High 8.8

CVE-2022-46342

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022
High 8.8

CVE-2022-46343

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022
High 7.8

CVE-2022-4283

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022
Unscored —

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has …

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 14, 2022

Moderate: tigervnc security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 7

Vulnerabilities 6

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request o…

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request acces…

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has …