[ol8_appstream] tigervnc-server-module-1.13.1-10.el8_10.x86_64

Name:	tigervnc-server-module
Version:	1.13.1
Release:	10.el8_10
Architecture:	x86_64
Group:	Unspecified
Size:	717563
License:	GPLv2+
RPM:	tigervnc-server-module-1.13.1-10.el8_10.x86_64.rpm
Source RPM:	tigervnc-1.13.1-10.el8_10.src.rpm
Build Date:	Fri May 24 2024
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.tigervnc.com
Summary:	TigerVNC module to Xorg
Description:	This package contains libvnc.so module to X server, allowing others to access the desktop on your machine.

Changelog (Show File list) (Show related packages)

Mon Apr 15 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-10

- Drop patches that are already part of xorg-x11-server
  Resolves: RHEL-30755
  Resolves: RHEL-30767
  Resolves: RHEL-30761

Thu Apr 04 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-9

- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  Resolves: RHEL-30755
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
  Resolves: RHEL-30767
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
  Resolves: RHEL-30761

Wed Feb 07 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-8

- Fix copy/paste error in the DeviceStateNotify
  Resolves: RHEL-20530

Mon Jan 22 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-7

- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20388
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20382
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20530
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21214

Mon Jan 08 2024 Jan Grulich <jgrulich@redhat.com> - 1.13.1-6

- Use dup() to get available file descriptor when using -inetd option
  Resolves: RHEL-21000

Mon Dec 18 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-5

- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18410
- Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18422

Wed Nov 01 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-4

- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15236

- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15230

Mon Oct 09 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-3

- Support username alias in PlainUsers
  Resolves: RHEL-4258

Tue Apr 11 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-2

- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
  Escalation Vulnerability
  Resolves: bz#2180306

Tue Mar 21 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-1

- 1.13.1
  Resolves: bz#2175748
- Restore "--fallbacktofreeport" option in the vncserver script
  Resolves: bz#2174398