[ol8_appstream] tigervnc-selinux-1.13.1-11.0.1.el8_10.noarch

Name:	tigervnc-selinux
Version:	1.13.1
Release:	11.0.1.el8_10
Architecture:	noarch
Group:	Unspecified
Size:	13909
License:	GPLv2+
RPM:	tigervnc-selinux-1.13.1-11.0.1.el8_10.noarch.rpm
Source RPM:	tigervnc-1.13.1-11.0.1.el8_10.src.rpm
Build Date:	Wed Jul 03 2024
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.tigervnc.com
Summary:	SELinux module for TigerVNC
Description:	This package provides the SELinux policy module to ensure TigerVNC runs properly under an environment with SELinux enabled.

Changelog (Show File list) (Show related packages)

Tue Jul 02 2024 Alan Steinberg <alan.steinberg@oracle.com> - 1.13.1-11.0.1

- Removed xorg-CVE-2024-31083-followup.patch, already fixed in xorg-X11-server-1.20.11-24.el8_10.

Tue May 28 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-11

- vncconfig: add option to force view-only remote client connections
  Resolves: RHEL-11908

Mon Apr 15 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-10

- Drop patches that are already part of xorg-x11-server
  Resolves: RHEL-30755
  Resolves: RHEL-30767
  Resolves: RHEL-30761

Thu Apr 04 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-9

- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  Resolves: RHEL-30755
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
  Resolves: RHEL-30767
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
  Resolves: RHEL-30761

Wed Feb 07 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-8

- Fix copy/paste error in the DeviceStateNotify
  Resolves: RHEL-20530

Mon Jan 22 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-7

- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20388
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20382
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20530
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21214

Mon Jan 08 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-6

- Use dup() to get available file descriptor when using -inetd option
  Resolves: RHEL-21000

Mon Dec 18 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-5

- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18410
- Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18422

Wed Nov 01 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-4

- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15236

- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15230

Mon Oct 09 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-3

- Support username alias in PlainUsers
  Resolves: RHEL-4258