ELSA-2024-2080

ELSA-2024-2080 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-04-29

Description

[1.8.0-33.0.1]
- Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch,
xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch,
xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch,
xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch,
xorg-CVE-2024-31083-followup.patch

[1.8.0-33]
- Fix crash caused by fix for CVE-2024-31083
Resolves: RHEL-30976

[1.8.0-32]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
Resolves: RHEL-31006
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
Resolves: RHEL-30976
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
Resolves: RHEL-30993

Related CVEs

CVE-2024-31081

CVE-2024-31083

CVE-2024-31080

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm	3a6bee5aa398623b5f6a805cdd1460a92126c7a2f12627ab6b5edfce2ecffdbc	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm	3a6bee5aa398623b5f6a805cdd1460a92126c7a2f12627ab6b5edfce2ecffdbc	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	2e5c107346e5a6e8fa1dc86f1b7cf3faad7536b08e083bca14c44f3edd07e3c0	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	2e5c107346e5a6e8fa1dc86f1b7cf3faad7536b08e083bca14c44f3edd07e3c0	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	e5ec55aaa58e6b4da882fe83d3007468293326b1f054cd98e93dee03512fc201	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	e5ec55aaa58e6b4da882fe83d3007468293326b1f054cd98e93dee03512fc201	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm	a48e91fc16f5604f13f416c8fe2baeb61ed5753c642e35ad3f20a16fa44ea66d	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm	a48e91fc16f5604f13f416c8fe2baeb61ed5753c642e35ad3f20a16fa44ea66d	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm	74cd0676d45c1c6682206398273bf8ece125f2ec32b7d8c62b84b40a04cee003	ELSA-2024-9901	ol7_aarch64_optional_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm	18cd1d2472eca728532613a088da3021f8e03ad05f8fe4765c209fb638f226b1	ELSA-2024-9901	ol7_aarch64_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm	18cd1d2472eca728532613a088da3021f8e03ad05f8fe4765c209fb638f226b1	ELSA-2024-9901	ol7_aarch64_u9_patch
	tigervnc-server-module-1.8.0-33.0.1.el7_9.aarch64.rpm	6e6dff8b38e0ca653f5f91e27dc1abb97db239b2d5465d28b37fc29b204b020c	ELSA-2024-9901	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	fbca037e9fe255d96627922f53a6566e143d0ccb2b02b523e5e80e9698fb8ddf	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-1.8.0-33.0.1.el7_9.x86_64.rpm	e7e7fc898af14f1a26d63db225eaf57193b04e2efb08ec73c67411b3fd7c18fc	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-1.8.0-33.0.1.el7_9.x86_64.rpm	e7e7fc898af14f1a26d63db225eaf57193b04e2efb08ec73c67411b3fd7c18fc	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	2e5c107346e5a6e8fa1dc86f1b7cf3faad7536b08e083bca14c44f3edd07e3c0	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	2e5c107346e5a6e8fa1dc86f1b7cf3faad7536b08e083bca14c44f3edd07e3c0	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	e5ec55aaa58e6b4da882fe83d3007468293326b1f054cd98e93dee03512fc201	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	e5ec55aaa58e6b4da882fe83d3007468293326b1f054cd98e93dee03512fc201	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-1.8.0-33.0.1.el7_9.x86_64.rpm	ad6497593d2d45cd6cdefd5ecbe4930561938ef2fee6691419c0421d0d82a7fe	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-1.8.0-33.0.1.el7_9.x86_64.rpm	ad6497593d2d45cd6cdefd5ecbe4930561938ef2fee6691419c0421d0d82a7fe	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm	74cd0676d45c1c6682206398273bf8ece125f2ec32b7d8c62b84b40a04cee003	ELSA-2024-9901	ol7_x86_64_optional_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.x86_64.rpm	b6a0f590dac4243303eecc367999bd095a4929ccd99fcb1ba33731b46543ec8c	ELSA-2024-9901	ol7_x86_64_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.x86_64.rpm	b6a0f590dac4243303eecc367999bd095a4929ccd99fcb1ba33731b46543ec8c	ELSA-2024-9901	ol7_x86_64_u9_patch
	tigervnc-server-module-1.8.0-33.0.1.el7_9.x86_64.rpm	3a11c747f7240ec445eb411bb084031e5946b8c1532dec45ebd40ca12f88d063	ELSA-2024-9901	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team