ELSA-2024-0010

ELSA-2024-0010 - tigervnc security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-01-03

Description

[1.13.1-3.3]
- xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
- xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
- xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

Related CVEs

CVE-2023-5367

CVE-2023-6377

CVE-2023-6478

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.13.1-3.el9_3.3.src.rpm	fd3d4e4fcead0abdff2ae520fa714d38	-	ol9_aarch64_appstream
	tigervnc-1.13.1-3.el9_3.3.aarch64.rpm	dded9aac5958c8de95f3497807abf8a2	-	ol9_aarch64_appstream
	tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm	fddd40dd0be426b555b7c42f7af0af7d	-	ol9_aarch64_appstream
	tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm	4547cfd43f34a3471aba9a297e25a9a5	-	ol9_aarch64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm	2605a8a2fda20e2b12e0acc9b1d0d561	-	ol9_aarch64_appstream
	tigervnc-server-1.13.1-3.el9_3.3.aarch64.rpm	0f427422c11492c98c32b2b1d0550395	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.3.aarch64.rpm	22dafb12e2615b7d11ce2d5ab18c0446	-	ol9_aarch64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.3.aarch64.rpm	d8ef0aad0d7c39b6ea99a580cd6a9a5d	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.13.1-3.el9_3.3.src.rpm	fd3d4e4fcead0abdff2ae520fa714d38	-	ol9_x86_64_appstream
	tigervnc-1.13.1-3.el9_3.3.x86_64.rpm	a28d96fe03bc509fa5718929ecc2f106	-	ol9_x86_64_appstream
	tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm	fddd40dd0be426b555b7c42f7af0af7d	-	ol9_x86_64_appstream
	tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm	4547cfd43f34a3471aba9a297e25a9a5	-	ol9_x86_64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm	2605a8a2fda20e2b12e0acc9b1d0d561	-	ol9_x86_64_appstream
	tigervnc-server-1.13.1-3.el9_3.3.x86_64.rpm	1afd5606403ddf6b2e9ce5632d3343df	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.3.x86_64.rpm	d1754cca74d71d21ec43a1bf597d2c10	-	ol9_x86_64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.3.x86_64.rpm	334479eae6de698f37ce062f8899a849	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team