Stay Secure with the Latest Linux Advisories

security advisorycritical issueupdate

Fedora 24: 2017-404f1a29fc Critical: mingw-gtk-vnc Buffer Issues

Security fix for CVE-2017-5884, CVE-2017-5885. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-404f1a29fc 2017-03-08 08:23:17.617326 -------------------------------------------------------------------------------- Name : mingw-gtk-vnc Product : Fedora 24 Version : 0.7.0 Release : 1.fc24 URL : Summary : MinGW Windows port of VNC client GTK widget Description : gtk-vnc is a VNC viewer widget for GTK. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-5884, CVE-2017-5885 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1418944 - CVE-2017-5884 gtk-vnc: Improper check of framebuffer boundaries when processing a tile https://bugzilla.redhat.com/show_bug.cgi?id=1418944 [ 2 ] Bug #1418952 - CVE-2017-5885 gtk-vnc: Integer overflow when processing SetColorMapEntries https://bugzilla.redhat.com/show_bug.cgi?id=1418952 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade mingw-gtk-vnc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Revision for mingw-gtk-vnc tackling urgent concerns. Incorporates solutions for erroneousverifications and buffer overflow weaknesses.. mingw-gtk-vnc Security Update,Fedora 24 Security Advisory,Critical Security Fix. . Severity: Critical. LinuxSecurity.com Team

Mar 08, 2017 •Critical Fedora