Security update for tigervnc (important)

An update that fixes 5 vulnerabilities is now available.

Description:

This update for tigervnc fixes the following issues:

• CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack
  memory in ZRLEDecoder (bsc#1159856).
• CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode
  (bsc#1160250).
• CVE-2019-15693: Fixed a heap-based buffer overflow in
  TightDecoder::FilterGradient (bsc#1159858).
• CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper
  error handling in processing MemOutStream (bsc#1160251).
• CVE-2019-15695: Fixed a stack-based buffer overflow, which could be
  triggered from CMsgReader::readSetCursor (bsc#1159860).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-87=1