Summary
[1.8.0-26.0.1]
- Dropped xorg-CVE-2023-5367.patch
[1.8.0-26]
- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
Resolves: RHEL-15223
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | tigervnc | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-icons | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-license | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-server | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-server-applet | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-server-minimal | 0:1.8.0-26.0.1.el7_9 |
| Oracle Linux · 7 | tigervnc-server-module | 0:1.8.0-26.0.1.el7_9 |
Vulnerabilities 2
-
High 7.8
Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty func…
-
Medium 4.7
Xorg-x11-server: use-after-free bug in destroywindow
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on o…