Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 38 FEDORA-2023-dbacf5d9f6 Moderate: Tigervnc Out-of-Bounds Fix

fedora
Calendar Grey November 13, 2023
Dist Fedora Esm H88
The Fedora 38 release for tigervnc resolves urgent concerns linked to Xserver CVEs, promoting improved security features and stability enhancements.
Fixes CVEs reported against Xserver.

Summary

Virtual Network Computing (VNC) is a remote display system which

allows you to view a computing 'desktop' environment not only on the

machine where it is running, but from anywhere on the Internet and

from a wide variety of machine architectures. This package contains a

client which will allow you to connect to other desktops running a VNC

server.

Update Information:

Fixes CVEs reported against Xserver.

Change Log

* Thu Nov 2 2023 Jan Grulich - 1.13.1-6 - Fix CVE-2023-5380 and CVE-2023-5367 (rebuild with fixed Xorg) * Wed Oct 18 2023 Kalev Lember - 1.13.1-5 - Drop unrecognized configure options - Add buildrequires to get correct font and xkb directories from pkg-config - Re-enable server in flatpak builds and fix the build * Sat Jul 22 2023 Fedora Release Engineering - 1.13.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2247468 - CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2247468 [ 2 ] Bug #2247469 - CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2247469

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-dbacf5d9f6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: tigervnc
Product: Fedora 38
Version: 1.13.1
Release: 6.fc38
Summary: A TigerVNC remote display system

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here