CentOS Errata and Security Advisory CESA-2024:0006
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2024-January/099175.html
Affected packages:
tigervnc
tigervnc-icons
tigervnc-license
tigervnc-server
tigervnc-server-applet
tigervnc-server-minimal
tigervnc-server-module
Upstream details at:
https://access.redhat.com/errata/RHSA-2024:0006
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 7 | x86_64 | tigervnc | < 1.8.0-28.el7_9 | tigervnc-1.8.0-28.el7_9.x86_64.rpm |
CentOS | 7 | noarch | tigervnc-icons | < 1.8.0-28.el7_9 | tigervnc-icons-1.8.0-28.el7_9.noarch.rpm |
CentOS | 7 | noarch | tigervnc-license | < 1.8.0-28.el7_9 | tigervnc-license-1.8.0-28.el7_9.noarch.rpm |
CentOS | 7 | x86_64 | tigervnc-server | < 1.8.0-28.el7_9 | tigervnc-server-1.8.0-28.el7_9.x86_64.rpm |
CentOS | 7 | noarch | tigervnc-server-applet | < 1.8.0-28.el7_9 | tigervnc-server-applet-1.8.0-28.el7_9.noarch.rpm |
CentOS | 7 | x86_64 | tigervnc-server-minimal | < 1.8.0-28.el7_9 | tigervnc-server-minimal-1.8.0-28.el7_9.x86_64.rpm |
CentOS | 7 | x86_64 | tigervnc-server-module | < 1.8.0-28.el7_9 | tigervnc-server-module-1.8.0-28.el7_9.x86_64.rpm |