ELSA-2017-2000

Описание

fltk [1.3.4-1]

• Re-base to 1.3.4 (+ sync with Fedora)

tigervnc [1.8.0-1]

• Update to 1.8.0 Resolves: bz#1388620

[1.7.90-2]

• Make RandR callbacks optional Resolves: bz#1444948

[1.7.90-1]

• Update to 1.7.90 Resolves: bz#1388620

[1.7.1-3]

• Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392] Resolves: bz#1439127 Prevent double free by crafted fences [CVE-2017-7393] Resolves: bz#1439134

[1.7.1-2]

• Be more restrictive with shared memory mode bits Resolves: bz#1152552 Limit max username/password size in SSecurityPlain [CVE-2017-7394] Resolves: bz#1438737 Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395] Resolves: bz#1438742

[1.7.1-1]

• Update to 1.7.1 Resolves: bz#1388620 Resolves: bz#1343899 Resolves: bz#1410164 Resolves: bz#1415547 Resolves: bz#1418945 Resolves: bz#1416290 Resolves: bz#1342956
• Fix shared memory leakage Resolves: bz#1358090
• Added systemd unit file for xvnc Resolves: bz#1393971