Red Hat Security AdvisoryRHSA-2023:7428
tigervnc security update
Released 2023-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tigervnc-1.8.0-26.el7_9, tigervnc-icons-1.8.0-26.el7_9, tigervnc-license-1.8.0-26.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) tigervnc-server-applet-1.8.0-26.el7_9, tigervnc-server-module-1.8.0-26.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tigervnc-1.8.0-26.el7_9, tigervnc-icons-1.8.0-26.el7_9, tigervnc-server-1.8.0-26.el7_9 +2
- Red Hat Enterprise Linux Server (v. 7) tigervnc-1.8.0-26.el7_9, tigervnc-icons-1.8.0-26.el7_9, tigervnc-license-1.8.0-26.el7_9 +2
- Red Hat Enterprise Linux Server Optional (v. 7) tigervnc-server-applet-1.8.0-26.el7_9, tigervnc-server-module-1.8.0-26.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) tigervnc-1.8.0-26.el7_9, tigervnc-icons-1.8.0-26.el7_9, tigervnc-license-1.8.0-26.el7_9 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) tigervnc-server-applet-1.8.0-26.el7_9, tigervnc-server-module-1.8.0-26.el7_9
Fixes 2 records
Priority LOW 35
A out-of-bounds write flaw was found in the xorg-x11-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00608 · Published 2023-10-25 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787
Priority LOW 23
A use-after-free flaw was found in the xorg-x11-server.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.007 · Published 2023-10-25 · Partial fix · 1.8.0-26.el7_9, 1.20.11-22.el8 +3 CWE-416