ELSA-2023-2830

ELSA-2023-2830 - tigervnc security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-05-24

Description

[1.12.0-15]
- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
Resolves: bz#2180305

[1.12.0-14]
- SELinux: allow vncsession create .vnc directory
Resolves: bz#2164704

[1.12.0-13]
- Add sanity check when cleaning up keymap changes
Resolves: bz#2169960

[1.12.0-12]
- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
Resolves: bz#2167058

[1.12.0-11]
- Rebuild for xorg-x11-server CVE-2022-46340 follow up fix

[1.12.0-10]
- Rebuild for xorg-x11-server CVEs
Resolves: CVE-2022-4283 (bz#2154233)
Resolves: CVE-2022-46340 (bz#2154220)
Resolves: CVE-2022-46341 (bz#2154223)
Resolves: CVE-2022-46342 (bz#2154225)
Resolves: CVE-2022-46343 (bz#2154227)
Resolves: CVE-2022-46344 (bz#2154229)

Related CVEs

CVE-2022-46340

CVE-2022-46343

CVE-2022-4283

CVE-2022-46341

CVE-2022-46344

CVE-2022-46342

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	tigervnc-1.12.0-15.el8_8.src.rpm	b92ad70ee1b423cbf2440f8a08d8b640	-
	tigervnc-1.12.0-15.el8_8.aarch64.rpm	3126151c2a8faa0958cae4bb051c7554	-
	tigervnc-icons-1.12.0-15.el8_8.noarch.rpm	34c71b3c53d014b77d98ec91cfa8dbf7	-
	tigervnc-license-1.12.0-15.el8_8.noarch.rpm	ae03e13332f2cf0110ac67eba4033ed9	-
	tigervnc-selinux-1.12.0-15.el8_8.noarch.rpm	0086feb9814418425397c7403c13c202	-
	tigervnc-server-1.12.0-15.el8_8.aarch64.rpm	ea9014a0560c02bcfcabd0ac8df0e6d3	-
	tigervnc-server-minimal-1.12.0-15.el8_8.aarch64.rpm	b3ac8caa2b6e878aa8f5995a2c7c001f	-
	tigervnc-server-module-1.12.0-15.el8_8.aarch64.rpm	61043454df4e22f228e3de74ecf7d8ac	-
Oracle Linux 8 (x86_64)	tigervnc-1.12.0-15.el8_8.src.rpm	b92ad70ee1b423cbf2440f8a08d8b640	-
	tigervnc-1.12.0-15.el8_8.x86_64.rpm	3edda4f189281912ee26e0cca4833b0d	-
	tigervnc-icons-1.12.0-15.el8_8.noarch.rpm	34c71b3c53d014b77d98ec91cfa8dbf7	-
	tigervnc-license-1.12.0-15.el8_8.noarch.rpm	ae03e13332f2cf0110ac67eba4033ed9	-
	tigervnc-selinux-1.12.0-15.el8_8.noarch.rpm	0086feb9814418425397c7403c13c202	-
	tigervnc-server-1.12.0-15.el8_8.x86_64.rpm	25c21cf54d115bea44350d2bce3bb5cd	-
	tigervnc-server-minimal-1.12.0-15.el8_8.x86_64.rpm	a0725339d0c7cc46f1f9ba024696c75a	-
	tigervnc-server-module-1.12.0-15.el8_8.x86_64.rpm	49216946b41fef4d6c7c4b941a2dcf82	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team