ELSA-2024-2080

ELSA-2024-2080 - tigervnc security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-04-29

Description

[1.8.0-33.0.1]
- Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch,
xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch,
xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch,
xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch,
xorg-CVE-2024-31083-followup.patch

[1.8.0-33]
- Fix crash caused by fix for CVE-2024-31083
Resolves: RHEL-30976

[1.8.0-32]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
Resolves: RHEL-31006
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
Resolves: RHEL-30976
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
Resolves: RHEL-30993

Related CVEs

CVE-2024-31081

CVE-2024-31083

CVE-2024-31080

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_aarch64_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_aarch64_optional_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_aarch64_u9_patch
	tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm	aab41b0023addc9865e0fe11c05d85e3	-	ol7_aarch64_latest
	tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm	aab41b0023addc9865e0fe11c05d85e3	-	ol7_aarch64_u9_patch
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	41429e46dfdeb4da3988eb0753daf03b	-	ol7_aarch64_latest
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	41429e46dfdeb4da3988eb0753daf03b	-	ol7_aarch64_u9_patch
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	d617a7c5024b584511f0f441e70d60f8	-	ol7_aarch64_latest
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	d617a7c5024b584511f0f441e70d60f8	-	ol7_aarch64_u9_patch
	tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm	deab9292a7489b9887d9982d06d1e7fc	-	ol7_aarch64_latest
	tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm	deab9292a7489b9887d9982d06d1e7fc	-	ol7_aarch64_u9_patch
	tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm	53f38c6a13f556e583476394c2629be5	-	ol7_aarch64_optional_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm	a657fc55b36736642471fe3b006fe97d	-	ol7_aarch64_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm	a657fc55b36736642471fe3b006fe97d	-	ol7_aarch64_u9_patch
	tigervnc-server-module-1.8.0-33.0.1.el7_9.aarch64.rpm	ca65b08ef7034c3c44aa0177cc84ba0e	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_x86_64_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_x86_64_optional_latest
	tigervnc-1.8.0-33.0.1.el7_9.src.rpm	9cf757f854cffa27241929d8864e4fb6	-	ol7_x86_64_u9_patch
	tigervnc-1.8.0-33.0.1.el7_9.x86_64.rpm	bc5997ea90880ad3d6b2e72e534b6038	-	ol7_x86_64_latest
	tigervnc-1.8.0-33.0.1.el7_9.x86_64.rpm	bc5997ea90880ad3d6b2e72e534b6038	-	ol7_x86_64_u9_patch
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	41429e46dfdeb4da3988eb0753daf03b	-	ol7_x86_64_latest
	tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm	41429e46dfdeb4da3988eb0753daf03b	-	ol7_x86_64_u9_patch
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	d617a7c5024b584511f0f441e70d60f8	-	ol7_x86_64_latest
	tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm	d617a7c5024b584511f0f441e70d60f8	-	ol7_x86_64_u9_patch
	tigervnc-server-1.8.0-33.0.1.el7_9.x86_64.rpm	91595174f01ff1f1e0e3c382a21b7da5	-	ol7_x86_64_latest
	tigervnc-server-1.8.0-33.0.1.el7_9.x86_64.rpm	91595174f01ff1f1e0e3c382a21b7da5	-	ol7_x86_64_u9_patch
	tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm	53f38c6a13f556e583476394c2629be5	-	ol7_x86_64_optional_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.x86_64.rpm	848fe4ce8464d6bcf6ab7f04e5c7557b	-	ol7_x86_64_latest
	tigervnc-server-minimal-1.8.0-33.0.1.el7_9.x86_64.rpm	848fe4ce8464d6bcf6ab7f04e5c7557b	-	ol7_x86_64_u9_patch
	tigervnc-server-module-1.8.0-33.0.1.el7_9.x86_64.rpm	f425279d802ac69cedc10d31348d44dc	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team