ELSA-2020-1497

ELSA-2020-1497 - tigervnc security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-04-18

Description

[1.9.0-14]
- Bump build version
Resolves: bz#1819877
Resolves: bz#1819879
Resolves: bz#1819882
Resolves: bz#1819886
Resolves: bz#1819884

[1.9.0-13]
- Fix stack buffer overflow in CMsgReader::readSetCursor
Resolves: bz#1819877

- Fix heap buffer overflow in DecodeManager::decodeRect
Resolves: bz#1819879

- Fix heap buffer overflow in TightDecoder::FilterGradient
Resolves: bz#1819882

- Fix heap-based buffer overflow triggered from CopyRectDecoder
Resolves: bz#1819886

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
Resolves: bz#1819884

Related CVEs

CVE-2019-15694

CVE-2019-15691

CVE-2019-15692

CVE-2019-15693

CVE-2019-15695

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	tigervnc-1.9.0-14.el8_1.src.rpm	d81376f430173d510160954ea73bb7ed	-
	tigervnc-1.9.0-14.el8_1.aarch64.rpm	066ba109c299c6bdadeca131dd6ae16b	-
	tigervnc-icons-1.9.0-14.el8_1.noarch.rpm	e5677627aadd8cb58ed67c2a94b60483	-
	tigervnc-license-1.9.0-14.el8_1.noarch.rpm	916c311dfb285d37ff80c1d4cc3f2f28	-
	tigervnc-server-1.9.0-14.el8_1.aarch64.rpm	6efcf6cc0d58f3142375befb48d5bf7c	-
	tigervnc-server-applet-1.9.0-14.el8_1.noarch.rpm	a5e973b34d9a4c1a4cf6437775bb9874	-
	tigervnc-server-minimal-1.9.0-14.el8_1.aarch64.rpm	947387dda63deef5153899dfcb665f69	-
	tigervnc-server-module-1.9.0-14.el8_1.aarch64.rpm	5afd60b6aa3f86005955b9f450eec24a	-
Oracle Linux 8 (x86_64)	tigervnc-1.9.0-14.el8_1.src.rpm	d81376f430173d510160954ea73bb7ed	-
	tigervnc-1.9.0-14.el8_1.x86_64.rpm	65eb721fa1fba507d3d0fee6ade0cc0c	-
	tigervnc-icons-1.9.0-14.el8_1.noarch.rpm	e5677627aadd8cb58ed67c2a94b60483	-
	tigervnc-license-1.9.0-14.el8_1.noarch.rpm	916c311dfb285d37ff80c1d4cc3f2f28	-
	tigervnc-server-1.9.0-14.el8_1.x86_64.rpm	703652ad8f0392d320bbe12062aca4c9	-
	tigervnc-server-applet-1.9.0-14.el8_1.noarch.rpm	a5e973b34d9a4c1a4cf6437775bb9874	-
	tigervnc-server-minimal-1.9.0-14.el8_1.x86_64.rpm	2ae0031314a0b34a4bb064c13b122db8	-
	tigervnc-server-module-1.9.0-14.el8_1.x86_64.rpm	c5ea5c4e7efdf49a2b7fc8ba700555d7	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team