Oracle Linux Security Advisory ELSA-2024-2616

http://linux.oracle.com/errata/ELSA-2024-2616.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
tigervnc-1.13.1-8.el9_4.3.x86_64.rpm
tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-server-1.13.1-8.el9_4.3.x86_64.rpm
tigervnc-server-minimal-1.13.1-8.el9_4.3.x86_64.rpm
tigervnc-server-module-1.13.1-8.el9_4.3.x86_64.rpm

aarch64:
tigervnc-1.13.1-8.el9_4.3.aarch64.rpm
tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm
tigervnc-server-1.13.1-8.el9_4.3.aarch64.rpm
tigervnc-server-minimal-1.13.1-8.el9_4.3.aarch64.rpm
tigervnc-server-module-1.13.1-8.el9_4.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//tigervnc-1.13.1-8.el9_4.3.src.rpm

Related CVEs:

CVE-2024-31080
CVE-2024-31081
CVE-2024-31083




Description of changes:

[1.13.1-8.3]
- Rebuild (z-stream target)
  Resolves: RHEL-30985
  Resolves: RHEL-31015

[1.13.1-8.2]
- Fix crash caused by fix for CVE-2024-31083
  Resolves: RHEL-30985

[1.13.1-8.1]
- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  Resolves: RHEL-31015
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
  Resolves: RHEL-30985


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle9: ELSA-2024-2616: tigervnc security Important Security Advisory Updates

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[1.13.1-8.3] - Rebuild (z-stream target) Resolves: RHEL-30985 Resolves: RHEL-31015 [1.13.1-8.2] - Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30985 [1.13.1-8.1] - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves: RHEL-31015 - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs Resolves: RHEL-30985

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//tigervnc-1.13.1-8.el9_4.3.src.rpm

x86_64

tigervnc-1.13.1-8.el9_4.3.x86_64.rpm tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm tigervnc-server-1.13.1-8.el9_4.3.x86_64.rpm tigervnc-server-minimal-1.13.1-8.el9_4.3.x86_64.rpm tigervnc-server-module-1.13.1-8.el9_4.3.x86_64.rpm

aarch64

tigervnc-1.13.1-8.el9_4.3.aarch64.rpm tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm tigervnc-server-1.13.1-8.el9_4.3.aarch64.rpm tigervnc-server-minimal-1.13.1-8.el9_4.3.aarch64.rpm tigervnc-server-module-1.13.1-8.el9_4.3.aarch64.rpm

i386

Severity
Related CVEs: CVE-2024-31080 CVE-2024-31081 CVE-2024-31083

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The Kinsing hacker group, or H2Miner, has been orchestrating illicit cryptocurrency mining campaigns since 2019 and poses a persistent security
32.Lock Code Circular Esm H320
2 - 3 min read
The Kimsuky APT group, reportedly linked to North Korea's Reconnaissance General Bureau (RGB), has been identified deploying a Linux version of its
4.Lock AbstractDigital Esm H320
2 - 3 min read
Recent research sheds light on the security vulnerabilities prevalent in Linux vendor kernels due to flawed engineering processes that backport
28.Lock Globe Esm H320
1 - 2 min read
The intersection of Linux and quantum computing has become increasingly apparent, emphasizing the importance of Linux-based operating systems in
6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved