Описание
Security update for tigervnc
This update for tigervnc fixes the following issues:
This security issue was fixed:
- CVE-2016-10207: Prevent crash caused by failed TLS connection (bnc#1023012)
This non-security issue was fixed:
- Fix random client disconnections (boo#1022432)
Список пакетов
openSUSE Leap 42.1
libXvnc-devel-1.6.0-11.1
libXvnc1-1.6.0-11.1
tigervnc-1.6.0-11.1
xorg-x11-Xvnc-1.6.0-11.1
openSUSE Leap 42.2
libXvnc-devel-1.6.0-11.1
libXvnc1-1.6.0-11.1
tigervnc-1.6.0-11.1
xorg-x11-Xvnc-1.6.0-11.1
Ссылки
- E-Mail link for openSUSE-SU-2017:0444-1
- SUSE Security Ratings
Описание
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
Затронутые продукты
openSUSE Leap 42.1:libXvnc-devel-1.6.0-11.1
openSUSE Leap 42.1:libXvnc1-1.6.0-11.1
openSUSE Leap 42.1:tigervnc-1.6.0-11.1
openSUSE Leap 42.1:xorg-x11-Xvnc-1.6.0-11.1
Ссылки
- CVE-2016-10207
- SUSE Bug 1023012