ELSA-2024-2616

ELSA-2024-2616 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-05-07

Description

[1.13.1-8.3]
- Rebuild (z-stream target)
Resolves: RHEL-30985
Resolves: RHEL-31015

[1.13.1-8.2]
- Fix crash caused by fix for CVE-2024-31083
Resolves: RHEL-30985

[1.13.1-8.1]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
Resolves: RHEL-31015
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
Resolves: RHEL-30985

Related CVEs

CVE-2024-31080

CVE-2024-31081

CVE-2024-31083

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.13.1-8.el9_4.3.src.rpm	eb4097d998d2d88c41e91b50cf38cb9beeeace3f934a3282c4343904eba3190e	-	ol9_aarch64_appstream
	tigervnc-1.13.1-8.el9_4.3.aarch64.rpm	d74ef69ac728290cb30871fd035d79b443e8bccc66b8f8f33d77af9a706ae483	-	ol9_aarch64_appstream
	tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm	8632fab833e2f6a50227e4c06a33136f49747cb2289f1d6ac899d9e07946f14e	-	ol9_aarch64_appstream
	tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm	dca54a452c01aef253c3eaf7bf344a5912cc819cd78012738eb10f3ffb6edc51	-	ol9_aarch64_appstream
	tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm	b49c6dbbfd0b70565e31927eaa26cf8e80f2b0b3d991a2fe40a63a6a36ba8528	-	ol9_aarch64_appstream
	tigervnc-server-1.13.1-8.el9_4.3.aarch64.rpm	fc88ebc213d22c0dc2e6f42ae332a3f57adb1676ae5482cb7728ddf86f43da77	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.13.1-8.el9_4.3.aarch64.rpm	ada763bacd0804d54f9461d0d9e26e7f909c69eb78bdd8270eed7e25a33d3fa2	-	ol9_aarch64_appstream
	tigervnc-server-module-1.13.1-8.el9_4.3.aarch64.rpm	17c79f3b54e87a76e006ac77c4c4285399879147884cc362aa3feab95450cad3	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.13.1-8.el9_4.3.src.rpm	eb4097d998d2d88c41e91b50cf38cb9beeeace3f934a3282c4343904eba3190e	-	ol9_x86_64_appstream
	tigervnc-1.13.1-8.el9_4.3.x86_64.rpm	14fb3abdd9ecd2057cd257af331559bfd4c914b9c4a5c4cc05cf15746806f09d	-	ol9_x86_64_appstream
	tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm	8632fab833e2f6a50227e4c06a33136f49747cb2289f1d6ac899d9e07946f14e	-	ol9_x86_64_appstream
	tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm	dca54a452c01aef253c3eaf7bf344a5912cc819cd78012738eb10f3ffb6edc51	-	ol9_x86_64_appstream
	tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm	b49c6dbbfd0b70565e31927eaa26cf8e80f2b0b3d991a2fe40a63a6a36ba8528	-	ol9_x86_64_appstream
	tigervnc-server-1.13.1-8.el9_4.3.x86_64.rpm	4a73c187c040f052a2a6a6fcb9d352d68992ea280a048fac575cd258bb96e02c	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.13.1-8.el9_4.3.x86_64.rpm	353c6813959ff3fa1874d06ee723f31f14bcb9b99d47e3d76a2cc16d50a5790f	-	ol9_x86_64_appstream
	tigervnc-server-module-1.13.1-8.el9_4.3.x86_64.rpm	995fb18ec795e5913993d2a39bd979a7f7c30f302f8514789145ee520ea47332	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team