ELSA-2020-3875

ELSA-2020-3875 - tigervnc security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-10-06

Description

[1.8.0-21]
- Add upstream patch needed because of previous security fixes
Resolves: bz#1826822

[1.8.0-20]
- Fix stack buffer overflow in CMsgReader::readSetCursor
Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
Resolves: bz#1791996

Related CVEs

CVE-2019-15695

CVE-2019-15691

CVE-2019-15692

CVE-2019-15693

CVE-2019-15694

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-1.8.0-21.el7.aarch64.rpm	84607cf4d238109371c09f43d7106db63435be6a53f9cc39844ef2ef5db0b958	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-21.el7.aarch64.rpm	84607cf4d238109371c09f43d7106db63435be6a53f9cc39844ef2ef5db0b958	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	f213eee4b9d784783764e07813449bfd109b69a4e12ce8b26db658c5257fcc6c	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	f213eee4b9d784783764e07813449bfd109b69a4e12ce8b26db658c5257fcc6c	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-license-1.8.0-21.el7.noarch.rpm	f9b61e725664f370cce4f8f2923acb5b56511cdc3a7b2de252740ec6acf9bd8f	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-license-1.8.0-21.el7.noarch.rpm	f9b61e725664f370cce4f8f2923acb5b56511cdc3a7b2de252740ec6acf9bd8f	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-server-1.8.0-21.el7.aarch64.rpm	f4d9d5e95e96fce3901bff4ddf6f754d6af49c85ac6140771f7a28f78769d181	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-1.8.0-21.el7.aarch64.rpm	f4d9d5e95e96fce3901bff4ddf6f754d6af49c85ac6140771f7a28f78769d181	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-server-applet-1.8.0-21.el7.noarch.rpm	a315b2bd23ec7725507f1375ac40ed3f50d69d4135864018d824deef698aadc7	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-server-minimal-1.8.0-21.el7.aarch64.rpm	f3378787ca9f426b6fff3b19a7e73b71fa3c188635d5f0340e96afb322b9c96e	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-minimal-1.8.0-21.el7.aarch64.rpm	f3378787ca9f426b6fff3b19a7e73b71fa3c188635d5f0340e96afb322b9c96e	ELSA-2024-9901	ol7_aarch64_u9_base
	tigervnc-server-module-1.8.0-21.el7.aarch64.rpm	8a72b01fc1aec304c22645ff50c18551bbdc5e9c5f778d3a70964a53db90f2ba	ELSA-2024-9901	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-1.8.0-21.el7.src.rpm	72f3b78424d5b38d5b4f5fc0fb555cdab41a85aeb347c58b0d9d5d3c908832df	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-1.8.0-21.el7.x86_64.rpm	6b5e5aa732f6b03a6fcdfe7001f94ec41aeb7cca548c5f1d3f098613d77489ad	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-21.el7.x86_64.rpm	6b5e5aa732f6b03a6fcdfe7001f94ec41aeb7cca548c5f1d3f098613d77489ad	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	f213eee4b9d784783764e07813449bfd109b69a4e12ce8b26db658c5257fcc6c	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-icons-1.8.0-21.el7.noarch.rpm	f213eee4b9d784783764e07813449bfd109b69a4e12ce8b26db658c5257fcc6c	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-license-1.8.0-21.el7.noarch.rpm	f9b61e725664f370cce4f8f2923acb5b56511cdc3a7b2de252740ec6acf9bd8f	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-license-1.8.0-21.el7.noarch.rpm	f9b61e725664f370cce4f8f2923acb5b56511cdc3a7b2de252740ec6acf9bd8f	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-server-1.8.0-21.el7.x86_64.rpm	5aaca7876e63b059e5e53166c0630a4eaaf1d26a081c39ffc0ed3906a7c578cf	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-1.8.0-21.el7.x86_64.rpm	5aaca7876e63b059e5e53166c0630a4eaaf1d26a081c39ffc0ed3906a7c578cf	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-server-applet-1.8.0-21.el7.noarch.rpm	a315b2bd23ec7725507f1375ac40ed3f50d69d4135864018d824deef698aadc7	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-server-minimal-1.8.0-21.el7.x86_64.rpm	af57eb37a7338b7a135a5cf692d81886b00f68cf88da04a0db1220bf71d25f82	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-minimal-1.8.0-21.el7.x86_64.rpm	af57eb37a7338b7a135a5cf692d81886b00f68cf88da04a0db1220bf71d25f82	ELSA-2024-9901	ol7_x86_64_u9_base
	tigervnc-server-module-1.8.0-21.el7.x86_64.rpm	03e98a2c277d09c1aabd2d4151799d5697e74d932f369b25b6d8df4ebaeea947	ELSA-2024-9901	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team