ELSA-2024-0010

ELSA-2024-0010 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-01-03

Description

[1.13.1-3.3]
- xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
- xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
- xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

Related CVEs

CVE-2023-5367

CVE-2023-6377

CVE-2023-6478

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.13.1-3.el9_3.3.src.rpm	e18eafb0330f45ddf6fc9e50687ec5fdc4b047780c900993d957dca6b2ad50e8	-	ol9_aarch64_appstream
	tigervnc-1.13.1-3.el9_3.3.aarch64.rpm	77a5980f36d9d8f1c118b9535f0173ed6f21749fb1725ded47a86b6abb254f04	-	ol9_aarch64_appstream
	tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm	9c6bb82dbbfcb7ac8794be9589f359c59a99421b4755642d8113e74ac2f22a37	-	ol9_aarch64_appstream
	tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm	f2193c38083c1a158d2063fbd2c84f119ddc02c5f3e69b89f507a12bc01cc157	-	ol9_aarch64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm	f570205c5b0744b9108b8d7d96ef81b12e988764b304d24912afcb3ebb613024	-	ol9_aarch64_appstream
	tigervnc-server-1.13.1-3.el9_3.3.aarch64.rpm	49180d75953660b6e00566509d9fdb7644fc8d8d81df729fea456db8326814b4	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.3.aarch64.rpm	e1f54456ee0bd0f5924657b0f29490129d4a17a5dac45f9b80c7e774e1d3815f	-	ol9_aarch64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.3.aarch64.rpm	1a8e1749bf6fdd70726bee6d792b2d07db30276f0bad4048d84c7c413887f636	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.13.1-3.el9_3.3.src.rpm	e18eafb0330f45ddf6fc9e50687ec5fdc4b047780c900993d957dca6b2ad50e8	-	ol9_x86_64_appstream
	tigervnc-1.13.1-3.el9_3.3.x86_64.rpm	8d37466b2b5f63559c422c53ad481915e4ad8692bc72553146dc13f599a244c8	-	ol9_x86_64_appstream
	tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm	9c6bb82dbbfcb7ac8794be9589f359c59a99421b4755642d8113e74ac2f22a37	-	ol9_x86_64_appstream
	tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm	f2193c38083c1a158d2063fbd2c84f119ddc02c5f3e69b89f507a12bc01cc157	-	ol9_x86_64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm	f570205c5b0744b9108b8d7d96ef81b12e988764b304d24912afcb3ebb613024	-	ol9_x86_64_appstream
	tigervnc-server-1.13.1-3.el9_3.3.x86_64.rpm	54393dcbae1bbf7299390c41f8eefaacfa0e35b4f8135d39638ce19618d65890	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.3.x86_64.rpm	00a95c58119c5f7878017a89f7549e2b9989dbc82731f758010832a4a5d1abfa	-	ol9_x86_64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.3.x86_64.rpm	3e81a6f283266abaff97cc4bc8ffdbfe160280e11c91e273d2865c74c897f09c	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team