ELSA-2023-7428

ELSA-2023-7428 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-11-22

Description

[1.8.0-26.0.1]
- Dropped xorg-CVE-2023-5367.patch

[1.8.0-26]
- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
Resolves: RHEL-15223

Related CVEs

CVE-2023-5367

CVE-2023-5380

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-1.8.0-26.0.1.el7_9.aarch64.rpm	251e6c1599d7144b77e386d9f218608638a65abc5cc95334b1202ab053b5a335	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-26.0.1.el7_9.aarch64.rpm	251e6c1599d7144b77e386d9f218608638a65abc5cc95334b1202ab053b5a335	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-icons-1.8.0-26.0.1.el7_9.noarch.rpm	203fb00d71d7b72b1f74eeaf0187501f3848a93231aa37cc6107ca20157f06be	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-icons-1.8.0-26.0.1.el7_9.noarch.rpm	203fb00d71d7b72b1f74eeaf0187501f3848a93231aa37cc6107ca20157f06be	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-license-1.8.0-26.0.1.el7_9.noarch.rpm	bb1c932d9bcb3245b6239b423d89c05d3371ff1425a8dbb38bd363cd6fe8b0a8	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-license-1.8.0-26.0.1.el7_9.noarch.rpm	bb1c932d9bcb3245b6239b423d89c05d3371ff1425a8dbb38bd363cd6fe8b0a8	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-1.8.0-26.0.1.el7_9.aarch64.rpm	548112f532de38c192dae34a32182e044715f60c6fa2e3675533ba290b4cffaa	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-1.8.0-26.0.1.el7_9.aarch64.rpm	548112f532de38c192dae34a32182e044715f60c6fa2e3675533ba290b4cffaa	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-applet-1.8.0-26.0.1.el7_9.noarch.rpm	6da0b39d56f589cc630809941a7579d6a116ff2ac55b344f869a3316c21bf14e	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-server-minimal-1.8.0-26.0.1.el7_9.aarch64.rpm	7c0e141639b8f859c671b4f7c9f6a11dee177a766ca5c1dbbdccdafd4593b1a7	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-minimal-1.8.0-26.0.1.el7_9.aarch64.rpm	7c0e141639b8f859c671b4f7c9f6a11dee177a766ca5c1dbbdccdafd4593b1a7	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-module-1.8.0-26.0.1.el7_9.aarch64.rpm	69910e980c221bc216ca1e918eefbdbeeaf737704b911b3ce210e28a5cfdaf69	ELSA-2024-9901	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-1.8.0-26.0.1.el7_9.src.rpm	e7a84f29452d414c6a1055788e9b0a94fbba21e4a32797d09f6d354d3f506cb1	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-1.8.0-26.0.1.el7_9.x86_64.rpm	7cf351d1b189c4a9dea6dcc3b11ede2f8ceee465bfcfe304f6874fccc34eda50	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-26.0.1.el7_9.x86_64.rpm	7cf351d1b189c4a9dea6dcc3b11ede2f8ceee465bfcfe304f6874fccc34eda50	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-icons-1.8.0-26.0.1.el7_9.noarch.rpm	203fb00d71d7b72b1f74eeaf0187501f3848a93231aa37cc6107ca20157f06be	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-icons-1.8.0-26.0.1.el7_9.noarch.rpm	203fb00d71d7b72b1f74eeaf0187501f3848a93231aa37cc6107ca20157f06be	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-license-1.8.0-26.0.1.el7_9.noarch.rpm	bb1c932d9bcb3245b6239b423d89c05d3371ff1425a8dbb38bd363cd6fe8b0a8	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-license-1.8.0-26.0.1.el7_9.noarch.rpm	bb1c932d9bcb3245b6239b423d89c05d3371ff1425a8dbb38bd363cd6fe8b0a8	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-1.8.0-26.0.1.el7_9.x86_64.rpm	3b676665d36c0b8322831cd3e41e87709c6897322cb06c7b866110a239fbe12c	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-1.8.0-26.0.1.el7_9.x86_64.rpm	3b676665d36c0b8322831cd3e41e87709c6897322cb06c7b866110a239fbe12c	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-applet-1.8.0-26.0.1.el7_9.noarch.rpm	6da0b39d56f589cc630809941a7579d6a116ff2ac55b344f869a3316c21bf14e	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-server-minimal-1.8.0-26.0.1.el7_9.x86_64.rpm	86e348ea6ab1256f7186bb014faf59186d97647c48926103eed2056c6cfdca29	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-minimal-1.8.0-26.0.1.el7_9.x86_64.rpm	86e348ea6ab1256f7186bb014faf59186d97647c48926103eed2056c6cfdca29	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-module-1.8.0-26.0.1.el7_9.x86_64.rpm	34c099a421a0d99514e0ea6d90048c19cc944a2e88515e695b2b233b61b0600d	ELSA-2024-9901	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team