Skip to content
OpenAdvisories
Medium ELSA-2024-3067 1 CVE

Moderate: tigervnc security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Summary

[1.13.1-8]
- Fix copy/paste error in the DeviceStateNotify
Resolves: RHEL-20530

[1.13.1-7]
- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
Resolves: RHEL-20388
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
Resolves: RHEL-20382
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Resolves: RHEL-20530
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
Resolves: RHEL-21214

[1.13.1-6]
- Use dup() to get available file descriptor when using -inetd option
Resolves: RHEL-21000

[1.13.1-5]
- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18410
- Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
Resolves: RHEL-18422

[1.13.1-4]
- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
Resolves: RHEL-15236

- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
Resolves: RHEL-15230

[1.13.1-3]
- Support username alias in PlainUsers
Resolves: RHEL-4258

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 8 tigervnc 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-icons 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-license 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-selinux 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-server 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-server-minimal 0:1.13.1-8.el8
Oracle Linux · 8 tigervnc-server-module 0:1.13.1-8.el8

Vulnerabilities 1