ELSA-2020-3875

ELSA-2020-3875 - tigervnc security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-10-06

Description

[1.8.0-21]
- Add upstream patch needed because of previous security fixes
Resolves: bz#1826822

[1.8.0-20]
- Fix stack buffer overflow in CMsgReader::readSetCursor
Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
Resolves: bz#1791996

Related CVEs

CVE-2019-15694

CVE-2019-15691

CVE-2019-15692

CVE-2019-15693

CVE-2019-15695

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-21.el7.src.rpm	136e81a0b2e5d4401daf26a475303a13	ELBA-2020-5005
	tigervnc-1.8.0-21.el7.aarch64.rpm	1c64e74d814c6ce9b7716c5d4c1dbb41	ELBA-2020-5005
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	b5205a1d0a5430bcc089f35fee5b8ab2	ELBA-2020-5005
	tigervnc-license-1.8.0-21.el7.noarch.rpm	314f16588aba9d5c3b17164c94d09a12	ELBA-2020-5005
	tigervnc-server-1.8.0-21.el7.aarch64.rpm	8d494042cac0e9e8ec8bf61a874e0b53	ELBA-2020-5005
	tigervnc-server-applet-1.8.0-21.el7.noarch.rpm	ec555cc04b6c2fa517c327205a5cd471	ELBA-2020-5005
	tigervnc-server-minimal-1.8.0-21.el7.aarch64.rpm	68cd88815ceb80a0212274c8a8da6747	ELBA-2020-5005
	tigervnc-server-module-1.8.0-21.el7.aarch64.rpm	edc438e6e9874d84eb42c5ffca867e0f	ELBA-2020-5005
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-21.el7.src.rpm	136e81a0b2e5d4401daf26a475303a13	ELBA-2020-5005
	tigervnc-1.8.0-21.el7.x86_64.rpm	80183b504efda3e60fd6bed3910dc739	ELBA-2020-5005
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	b5205a1d0a5430bcc089f35fee5b8ab2	ELBA-2020-5005
	tigervnc-license-1.8.0-21.el7.noarch.rpm	314f16588aba9d5c3b17164c94d09a12	ELBA-2020-5005
	tigervnc-server-1.8.0-21.el7.x86_64.rpm	f0c23456929db5f117e2d89d8c2e5431	ELBA-2020-5005
	tigervnc-server-applet-1.8.0-21.el7.noarch.rpm	ec555cc04b6c2fa517c327205a5cd471	ELBA-2020-5005
	tigervnc-server-minimal-1.8.0-21.el7.x86_64.rpm	dfe079a955fd4d2bd05f94620a7edcc6	ELBA-2020-5005
	tigervnc-server-module-1.8.0-21.el7.x86_64.rpm	388c14b690f8fa4ba1f486383a2830fe	ELBA-2020-5005

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team