ELSA-2024-0607

ELSA-2024-0607 - tigervnc security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-01-31

Description

[1.13.1-2.7]
- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
Resolves: RHEL-20388
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
Resolves: RHEL-20382
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Resolves: RHEL-20530
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
Resolves: RHEL-21214

Related CVEs

CVE-2024-21885

CVE-2024-0229

CVE-2023-6816

CVE-2024-21886

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tigervnc-1.13.1-2.el8_9.7.src.rpm	986fb48b2769d4031abaedd274e8923c	-	ol8_aarch64_appstream
	tigervnc-1.13.1-2.el8_9.7.aarch64.rpm	7dc6e22202f979ee43ea1efe2e94c7c9	-	ol8_aarch64_appstream
	tigervnc-icons-1.13.1-2.el8_9.7.noarch.rpm	6228f02dcace01843c9948c10b90ca98	-	ol8_aarch64_appstream
	tigervnc-license-1.13.1-2.el8_9.7.noarch.rpm	61b4874979de6e7a4375d384fff0892c	-	ol8_aarch64_appstream
	tigervnc-selinux-1.13.1-2.el8_9.7.noarch.rpm	9a37b965734c265251e0dabb081816f4	-	ol8_aarch64_appstream
	tigervnc-server-1.13.1-2.el8_9.7.aarch64.rpm	3ac68479d538ff8acc7f5f7a5dfa8157	-	ol8_aarch64_appstream
	tigervnc-server-minimal-1.13.1-2.el8_9.7.aarch64.rpm	8b5958e4c3a61a35995f098c45aa38e4	-	ol8_aarch64_appstream
	tigervnc-server-module-1.13.1-2.el8_9.7.aarch64.rpm	360f513b0e8ded6bec09aa435ba19e11	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	tigervnc-1.13.1-2.el8_9.7.src.rpm	986fb48b2769d4031abaedd274e8923c	-	ol8_x86_64_appstream
	tigervnc-1.13.1-2.el8_9.7.x86_64.rpm	492a29d0ba493112d7bfa7431a6f78f7	-	ol8_x86_64_appstream
	tigervnc-icons-1.13.1-2.el8_9.7.noarch.rpm	6228f02dcace01843c9948c10b90ca98	-	ol8_x86_64_appstream
	tigervnc-license-1.13.1-2.el8_9.7.noarch.rpm	61b4874979de6e7a4375d384fff0892c	-	ol8_x86_64_appstream
	tigervnc-selinux-1.13.1-2.el8_9.7.noarch.rpm	9a37b965734c265251e0dabb081816f4	-	ol8_x86_64_appstream
	tigervnc-server-1.13.1-2.el8_9.7.x86_64.rpm	cf733613445473bd718f7b0287e340fb	-	ol8_x86_64_appstream
	tigervnc-server-minimal-1.13.1-2.el8_9.7.x86_64.rpm	3da21f02875419e834eea8f5efa0df3a	-	ol8_x86_64_appstream
	tigervnc-server-module-1.13.1-2.el8_9.7.x86_64.rpm	08455a2b6b4fa1c54c7ae97de95585b7	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team