Описание
ELSA-2024-2080: tigervnc security update (IMPORTANT)
[1.8.0-33.0.1]
- Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch, xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch, xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch, xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch, xorg-CVE-2024-31083-followup.patch
[1.8.0-33]
- Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30976
[1.8.0-32]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves: RHEL-31006
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs Resolves: RHEL-30976
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice Resolves: RHEL-30993
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
tigervnc
1.8.0-33.0.1.el7_9
tigervnc-icons
1.8.0-33.0.1.el7_9
tigervnc-license
1.8.0-33.0.1.el7_9
tigervnc-server
1.8.0-33.0.1.el7_9
tigervnc-server-applet
1.8.0-33.0.1.el7_9
tigervnc-server-minimal
1.8.0-33.0.1.el7_9
tigervnc-server-module
1.8.0-33.0.1.el7_9
Oracle Linux x86_64
tigervnc
1.8.0-33.0.1.el7_9
tigervnc-icons
1.8.0-33.0.1.el7_9
tigervnc-license
1.8.0-33.0.1.el7_9
tigervnc-server
1.8.0-33.0.1.el7_9
tigervnc-server-applet
1.8.0-33.0.1.el7_9
tigervnc-server-minimal
1.8.0-33.0.1.el7_9
tigervnc-server-module
1.8.0-33.0.1.el7_9