Stay Secure with the Latest Linux Advisories

security advisorysecurity updateclient issue

Mageia 7: 2020-0042 Moderate: Tigervnc Client And Server Issues

Updated tigervnc packages fix security vulnerabilities: The tigervnc package has been updated to version 1.10.1 to fix multiple unspecified security issues. These issues affect both the client and server and could theoretically allow an malicious peer to take control over the . MGASA-2020-0042 - Updated tigervnc packages fix security vulnerabilities Publication date: 19 Jan 2020 URL: https://advisories.mageia.org/MGASA-2020-0042.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-15691, CVE-2019-15692, CVE-2019-15693, CVE-2019-15694, CVE-2019-15695 Updated tigervnc packages fix security vulnerabilities: The tigervnc package has been updated to version 1.10.1 to fix multiple unspecified security issues. These issues affect both the client and server and could theoretically allow an malicious peer to take control over the software on the other side. No working exploit is known at this time, and the issues require the peer to first be authenticated (CVE-2019-15691, CVE-2019-15692, CVE-2019-15693, CVE-2019-15694, CVE-2019-15695). References: - https://bugs.mageia.org/show_bug.cgi?id=25917 - https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 - https://www.openwall.com/lists/oss-security/2019/12/20/2 - https://www.cve.org/CVERecord?id=CVE-2019-15691 - https://www.cve.org/CVERecord?id=CVE-2019-15692 - https://www.cve.org/CVERecord?id=CVE-2019-15693 - https://www.cve.org/CVERecord?id=CVE-2019-15694 - https://www.cve.org/CVERecord?id=CVE-2019-15695 SRPMS: - 7/core/tigervnc-1.10.1-1.mga7 . Recent updates to tigervnc packages tackle security vulnerabilities that could enable unauthorized control by malicious actors. Learn more about the specifics of these fixes.. tigervnc update, mageia security, package vulnerabilities, software patching. . LinuxSecurity.com Team

Jan 19, 2020 Mageia