Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 37: 2023-4708733ccc Moderate: Tigervnc Xserver Fix

fedora
Calendar Grey November 18, 2023
Dist Fedora Esm H88
Enhancements for Fedora 37 address severe issues in TigerVNC. Keep your environment protected by applying the newest update.
Fixes CVEs reported against Xserver.

Summary

Virtual Network Computing (VNC) is a remote display system which

allows you to view a computing 'desktop' environment not only on the

machine where it is running, but from anywhere on the Internet and

from a wide variety of machine architectures. This package contains a

client which will allow you to connect to other desktops running a VNC

server.

Update Information:

Fixes CVEs reported against Xserver.

Topics%20covered

Topics Covered

security advisory moderate Fedora bug fix remote desktop Tigervnc Xserver

Change Log

* Thu Nov 2 2023 Jan Grulich - 1.13.1-6 - Fix CVE-2023-5380 and CVE-2023-5367 (rebuild with fixed Xorg) * Wed Oct 18 2023 Kalev Lember - 1.13.1-5 - Drop unrecognized configure options - Add buildrequires to get correct font and xkb directories from pkg-config - Re-enable server in flatpak builds and fix the build * Sat Jul 22 2023 Fedora Release Engineering - 1.13.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2247468 - CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2247468 [ 2 ] Bug #2247469 - CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2247469

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-4708733ccc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: tigervnc
Product: Fedora 37
Version: 1.13.1
Release: 6.fc37
URL: https://tigervnc.org/
Summary: A TigerVNC remote display system

Topics%20covered

Topics Covered

security advisory moderate Fedora bug fix remote desktop Tigervnc Xserver

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here