ELSA-2023-2830

ELSA-2023-2830 - tigervnc security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-05-24

Description

[1.12.0-15]
- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
Resolves: bz#2180305

[1.12.0-14]
- SELinux: allow vncsession create .vnc directory
Resolves: bz#2164704

[1.12.0-13]
- Add sanity check when cleaning up keymap changes
Resolves: bz#2169960

[1.12.0-12]
- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
Resolves: bz#2167058

[1.12.0-11]
- Rebuild for xorg-x11-server CVE-2022-46340 follow up fix

[1.12.0-10]
- Rebuild for xorg-x11-server CVEs
Resolves: CVE-2022-4283 (bz#2154233)
Resolves: CVE-2022-46340 (bz#2154220)
Resolves: CVE-2022-46341 (bz#2154223)
Resolves: CVE-2022-46342 (bz#2154225)
Resolves: CVE-2022-46343 (bz#2154227)
Resolves: CVE-2022-46344 (bz#2154229)

Related CVEs

CVE-2022-46340

CVE-2022-46343

CVE-2022-4283

CVE-2022-46341

CVE-2022-46344

CVE-2022-46342

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tigervnc-1.12.0-15.el8_8.src.rpm	5944577f6ec4c34216eb61cd81b7216935db5db15b39775a6ea9521c673eac86	-	ol8_aarch64_appstream
	tigervnc-1.12.0-15.el8_8.aarch64.rpm	6b61d07c236a589da0e50e611b1f7bd3d20f6666c05a706ccc03a8c324d1db23	-	ol8_aarch64_appstream
	tigervnc-icons-1.12.0-15.el8_8.noarch.rpm	71208b9ddee4756777f83e5eb6bcdcf5882ac90dec82f2eae5f4742ea50c74f9	-	ol8_aarch64_appstream
	tigervnc-license-1.12.0-15.el8_8.noarch.rpm	8f6aa5687d7cbfd3b587a11c1ba6b777142f34b07510bdc2ba2efcea2c22d062	-	ol8_aarch64_appstream
	tigervnc-selinux-1.12.0-15.el8_8.noarch.rpm	6afe3e8e9b7347c9340f4be35cedc53adccaf6b7888772a7c81289529f62c920	-	ol8_aarch64_appstream
	tigervnc-server-1.12.0-15.el8_8.aarch64.rpm	af0a348f4616352266522c20a79bd0b0da58b50169b2c6d695dd0c1be42b325c	-	ol8_aarch64_appstream
	tigervnc-server-minimal-1.12.0-15.el8_8.aarch64.rpm	1ee401c1f0c32a28313d76c775feb13b0f55e68073894dbaaea4d78eb393a47b	-	ol8_aarch64_appstream
	tigervnc-server-module-1.12.0-15.el8_8.aarch64.rpm	7270a3d1ea012cb08040448c024558d7a46741e9d68543bc222639f0c313ef1d	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	tigervnc-1.12.0-15.el8_8.src.rpm	5944577f6ec4c34216eb61cd81b7216935db5db15b39775a6ea9521c673eac86	-	ol8_x86_64_appstream
	tigervnc-1.12.0-15.el8_8.x86_64.rpm	a37828141bde72f615d1613d5e79c523902072aa5332e9b491ec48b026a09459	-	ol8_x86_64_appstream
	tigervnc-icons-1.12.0-15.el8_8.noarch.rpm	71208b9ddee4756777f83e5eb6bcdcf5882ac90dec82f2eae5f4742ea50c74f9	-	ol8_x86_64_appstream
	tigervnc-license-1.12.0-15.el8_8.noarch.rpm	8f6aa5687d7cbfd3b587a11c1ba6b777142f34b07510bdc2ba2efcea2c22d062	-	ol8_x86_64_appstream
	tigervnc-selinux-1.12.0-15.el8_8.noarch.rpm	6afe3e8e9b7347c9340f4be35cedc53adccaf6b7888772a7c81289529f62c920	-	ol8_x86_64_appstream
	tigervnc-server-1.12.0-15.el8_8.x86_64.rpm	350f8e1c00c4da679487ede8c5c41d83c4713d2c4e1047b7d90c8b6b6a55e0ca	-	ol8_x86_64_appstream
	tigervnc-server-minimal-1.12.0-15.el8_8.x86_64.rpm	6830767710d3fdbb4acef7e4125f5245e6c0114c502bf89c388d4e0a5d46af3e	-	ol8_x86_64_appstream
	tigervnc-server-module-1.12.0-15.el8_8.x86_64.rpm	aa9d2f25bda16d5c224cee78d10de80e789350f7c7d6d488072f645407720c52	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team