ELSA-2024-3261

ELSA-2024-3261 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-05-29

Description

[1.13.1-10]
- Drop patches that are already part of xorg-x11-server
Resolves: RHEL-30755
Resolves: RHEL-30767
Resolves: RHEL-30761

[1.13.1-9]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
Resolves: RHEL-30755
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
Resolves: RHEL-30767
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
Resolves: RHEL-30761

Related CVEs

CVE-2024-31081

CVE-2024-31080

CVE-2024-31083

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tigervnc-1.13.1-10.el8_10.src.rpm	5c9b51cc90ce9464240756fe7599ec0171bf4370d4a7c390382b5da634c19374	-	ol8_aarch64_appstream
	tigervnc-1.13.1-10.el8_10.aarch64.rpm	77b75a963aa6fb38111acbe68f5adc0ef495f417fe0d25c3325d08042ef9889c	-	ol8_aarch64_appstream
	tigervnc-icons-1.13.1-10.el8_10.noarch.rpm	4211720fa93360b3d47d75ac735000fa3624df8d8c4918ba3317cbbe18c44866	-	ol8_aarch64_appstream
	tigervnc-license-1.13.1-10.el8_10.noarch.rpm	214fbdc6d35abbd4016749a71a37e1bda9ff8afdd156a5007885495efbb61b40	-	ol8_aarch64_appstream
	tigervnc-selinux-1.13.1-10.el8_10.noarch.rpm	3d6f866c2668b841251519cd2b60e3cb730dc661944bd34b95a5372d18eed5c9	-	ol8_aarch64_appstream
	tigervnc-server-1.13.1-10.el8_10.aarch64.rpm	c51cb8ab497eaf501f2aab247dd1f00f637873cbefce366c8a9f222c2dc6410b	-	ol8_aarch64_appstream
	tigervnc-server-minimal-1.13.1-10.el8_10.aarch64.rpm	e913e207bff6d12fceeca95601ade4fb6a701176e5a16ad46f576e91413f8dd1	-	ol8_aarch64_appstream
	tigervnc-server-module-1.13.1-10.el8_10.aarch64.rpm	22004954496679a49dcf3828c9d6272c80115b7d39f3289195357e86a4591dcd	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	tigervnc-1.13.1-10.el8_10.src.rpm	5c9b51cc90ce9464240756fe7599ec0171bf4370d4a7c390382b5da634c19374	-	ol8_x86_64_appstream
	tigervnc-1.13.1-10.el8_10.x86_64.rpm	3a029d4a20dd24686b569d07dd982e4cad120bef6e1383e9e359f0dd470cf7c9	-	ol8_x86_64_appstream
	tigervnc-icons-1.13.1-10.el8_10.noarch.rpm	4211720fa93360b3d47d75ac735000fa3624df8d8c4918ba3317cbbe18c44866	-	ol8_x86_64_appstream
	tigervnc-license-1.13.1-10.el8_10.noarch.rpm	214fbdc6d35abbd4016749a71a37e1bda9ff8afdd156a5007885495efbb61b40	-	ol8_x86_64_appstream
	tigervnc-selinux-1.13.1-10.el8_10.noarch.rpm	3d6f866c2668b841251519cd2b60e3cb730dc661944bd34b95a5372d18eed5c9	-	ol8_x86_64_appstream
	tigervnc-server-1.13.1-10.el8_10.x86_64.rpm	bc79fe5593894958f5433286853ba5950035d56d70faa7811467bb67cf199d91	-	ol8_x86_64_appstream
	tigervnc-server-minimal-1.13.1-10.el8_10.x86_64.rpm	4ea1c375443cd9f8e75aebc7c2842d1ae2609d16afbe6fbfc78d392bd806cdc6	-	ol8_x86_64_appstream
	tigervnc-server-module-1.13.1-10.el8_10.x86_64.rpm	f61c8d2a3a6a2bbd7a7175966193027d0a69a03cac39535b87ab342107bc49f5	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team