ELSA-2024-0557

ELSA-2024-0557 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-01-31

Description

[1.13.1-3.6]
- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
Resolves: RHEL-20389
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
Resolves: RHEL-20383
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Resolves: RHEL-20533
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
Resolves: RHEL-21213

Related CVEs

CVE-2024-21885

CVE-2023-6816

CVE-2024-21886

CVE-2024-0229

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.13.1-3.el9_3.6.src.rpm	d9f5b5641f94a90e2e50bb17e4932cd62c92ebdfb50847454fa7743e415c0d07	-	ol9_aarch64_appstream
	tigervnc-1.13.1-3.el9_3.6.aarch64.rpm	c9e4f1ef83069d36264314b94ffe9568c9e4f454a78514e10e4403f6eb7d83a3	-	ol9_aarch64_appstream
	tigervnc-icons-1.13.1-3.el9_3.6.noarch.rpm	1801fb641e113c5b9914ad09b3fc6ad0e93087aa019b92e6b0fd5e2ce199402d	-	ol9_aarch64_appstream
	tigervnc-license-1.13.1-3.el9_3.6.noarch.rpm	9631be0d4d4c50ac603b1004983078af34810ecdbd2e6dac112d66d622866353	-	ol9_aarch64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.6.noarch.rpm	2541d6017d05177af12b00162a47b3706cee603ef79a1eea8d6b98e1efc7d561	-	ol9_aarch64_appstream
	tigervnc-server-1.13.1-3.el9_3.6.aarch64.rpm	e4c4df56587d90ac82c2df48c7fe8f002cd328e1e3b79554005ae2e76c530962	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.6.aarch64.rpm	a9be21308ad37941dfc0fa716e637f4d8123607f7908a79979a31684af37a5ea	-	ol9_aarch64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.6.aarch64.rpm	b6e6d8f129e77826019d27eff8a6788ed3d9f5a0ecaa791c3fb74b9c783f42f4	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.13.1-3.el9_3.6.src.rpm	d9f5b5641f94a90e2e50bb17e4932cd62c92ebdfb50847454fa7743e415c0d07	-	ol9_x86_64_appstream
	tigervnc-1.13.1-3.el9_3.6.x86_64.rpm	6c5b4f6c1b9dfc3c4fa1fab8ee43eb0d5d76c11c9edce444afa2999b5abc390e	-	ol9_x86_64_appstream
	tigervnc-icons-1.13.1-3.el9_3.6.noarch.rpm	1801fb641e113c5b9914ad09b3fc6ad0e93087aa019b92e6b0fd5e2ce199402d	-	ol9_x86_64_appstream
	tigervnc-license-1.13.1-3.el9_3.6.noarch.rpm	9631be0d4d4c50ac603b1004983078af34810ecdbd2e6dac112d66d622866353	-	ol9_x86_64_appstream
	tigervnc-selinux-1.13.1-3.el9_3.6.noarch.rpm	2541d6017d05177af12b00162a47b3706cee603ef79a1eea8d6b98e1efc7d561	-	ol9_x86_64_appstream
	tigervnc-server-1.13.1-3.el9_3.6.x86_64.rpm	3be89263ef8627f83320060d9636b3e31d4e65cffb6e0b61c32069f9be8b25f1	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.13.1-3.el9_3.6.x86_64.rpm	4d70a3a31e930d9de75bc96c78f2bf6fa25b2afd0357a52d0623f64d99a62936	-	ol9_x86_64_appstream
	tigervnc-server-module-1.13.1-3.el9_3.6.x86_64.rpm	6036f1d9ecc116012b73178920baaa87a3595d6316b5847ff1acc4cef0d55e05	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team