ELSA-2024-0006

ELSA-2024-0006 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-01-02

Description

[1.8.0-28.0.1]
- Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6377.patch, and xorg-CVE-2023-6478.patch

[1.8.0-28]
- Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18415

[1.8.0-27]
- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18415
- CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
Resolves: RHEL-18427

Related CVEs

CVE-2023-6377

CVE-2023-6478

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-1.8.0-28.0.1.el7_9.aarch64.rpm	de6b993380e26b250b433176224433cdf8f983ade7a5f2aa216105edd0c68e78	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-28.0.1.el7_9.aarch64.rpm	de6b993380e26b250b433176224433cdf8f983ade7a5f2aa216105edd0c68e78	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm	101b6c538685f1a3cc9b24a7ded453911146a37aa40f55d44c88f02bcb423868	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm	101b6c538685f1a3cc9b24a7ded453911146a37aa40f55d44c88f02bcb423868	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm	1ba9142ecaa177019651184edeece9f79bdd597c8051548763c7a861167c83cc	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm	1ba9142ecaa177019651184edeece9f79bdd597c8051548763c7a861167c83cc	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-1.8.0-28.0.1.el7_9.aarch64.rpm	d37b2f85f67d6f4bdf9d780c597f8fdabedd554b51821f9bf3601db76844fa07	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-1.8.0-28.0.1.el7_9.aarch64.rpm	d37b2f85f67d6f4bdf9d780c597f8fdabedd554b51821f9bf3601db76844fa07	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-applet-1.8.0-28.0.1.el7_9.noarch.rpm	546d3f7c91a51a502a50f3e695c9e1f2434b0c98cf7071ed38180bf595c23ac0	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-server-minimal-1.8.0-28.0.1.el7_9.aarch64.rpm	fece2000fe6847a4449e49ca84497f57db3010ae4e190c19f1ed3289e60133ef	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-minimal-1.8.0-28.0.1.el7_9.aarch64.rpm	fece2000fe6847a4449e49ca84497f57db3010ae4e190c19f1ed3289e60133ef	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-module-1.8.0-28.0.1.el7_9.aarch64.rpm	38bf4b095578ae5d064d3a936898e2163689d0a607dac66afe0ba77cc5293332	ELSA-2024-9901	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-1.8.0-28.0.1.el7_9.src.rpm	6f5effd2812c25a8cf8209c467f83688112d579f78e2d0dab3e8505034dd756c	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-1.8.0-28.0.1.el7_9.x86_64.rpm	c2d58c40c00f4306026728a0adb950dc839212b1f27759d1dd2517f0988790bc	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-28.0.1.el7_9.x86_64.rpm	c2d58c40c00f4306026728a0adb950dc839212b1f27759d1dd2517f0988790bc	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm	101b6c538685f1a3cc9b24a7ded453911146a37aa40f55d44c88f02bcb423868	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm	101b6c538685f1a3cc9b24a7ded453911146a37aa40f55d44c88f02bcb423868	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm	1ba9142ecaa177019651184edeece9f79bdd597c8051548763c7a861167c83cc	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm	1ba9142ecaa177019651184edeece9f79bdd597c8051548763c7a861167c83cc	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-1.8.0-28.0.1.el7_9.x86_64.rpm	2f70535f629770057a34b2a2993a3cf3539a25acad3b7c9e2ca05769df301c60	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-1.8.0-28.0.1.el7_9.x86_64.rpm	2f70535f629770057a34b2a2993a3cf3539a25acad3b7c9e2ca05769df301c60	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-applet-1.8.0-28.0.1.el7_9.noarch.rpm	546d3f7c91a51a502a50f3e695c9e1f2434b0c98cf7071ed38180bf595c23ac0	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-server-minimal-1.8.0-28.0.1.el7_9.x86_64.rpm	6f544afd32a9aee249d8abbbede5462482534fb2c63190a5896f14d14b150602	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-minimal-1.8.0-28.0.1.el7_9.x86_64.rpm	6f544afd32a9aee249d8abbbede5462482534fb2c63190a5896f14d14b150602	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-module-1.8.0-28.0.1.el7_9.x86_64.rpm	a6c57f4f6e4e8287e8c46a707c535d3fd9f5e433ae295352c99a922426af115b	ELSA-2024-9901	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team