[ol9_appstream] tigervnc-server-module-1.13.1-3.el9_3.6.aarch64

Name:	tigervnc-server-module
Version:	1.13.1
Release:	3.el9_3.6
Architecture:	aarch64
Group:	Unspecified
Size:	665097
License:	GPL-2.0-or-later
RPM:	tigervnc-server-module-1.13.1-3.el9_3.6.aarch64.rpm
Source RPM:	tigervnc-1.13.1-3.el9_3.6.src.rpm
Build Date:	Wed Jan 31 2024
Build Host:	build-ol9-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.tigervnc.com
Summary:	TigerVNC module to Xorg
Description:	This package contains libvnc.so module to X server, allowing others to access the desktop on your machine.

Changelog (Show File list) (Show related packages)

Tue Jan 30 2024 Craig Guiller <craig.guiller@oracle.com> - 1.13.1-3.6

- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20389
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20383
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20533
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21213

Tue Jan 02 2024 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1.13.1-3.3

- xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
- xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
- xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

Tue Apr 11 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-2

- xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
  Escalation Vulnerability
  Resolves: bz#2180310

Tue Mar 21 2023 Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
```
- 1.13.1
  Resolves: bz#2175732
```

Tue Feb 21 2023 Jan Grulich <jgrulich@redhat.com> - 1.12.0-12

- SELinux: allow vncsession create .vnc directory
  Resolves: bz#2164703

Wed Feb 15 2023 Jan Grulich <jgrulich@redhat.com> - 1.12.0-11

- Add sanity check when cleaning up keymap changes
  Resolves: bz#2169965

Mon Feb 06 2023 Jan Grulich <jgrulich@redhat.com> - 1.12.0-10

- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
  Resolves: bz#2167061

Tue Dec 20 2022 Tomas Popela <tpopela@redhat.com> - 1.12.0-9
```
- Rebuild for xorg-x11-server CVE-2022-46340 follow up fix
```

Fri Dec 16 2022 Jan Grulich <jgrulich@redhat.com> - 1.12.0-8

- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154234)
  Resolves: CVE-2022-46340 (bz#2154221)
  Resolves: CVE-2022-46341 (bz#2154224)
  Resolves: CVE-2022-46342 (bz#2154226)
  Resolves: CVE-2022-46343 (bz#2154228)
  Resolves: CVE-2022-46344 (bz#2154230)

Thu Dec 01 2022 Jan Grulich <jgrulich@redhat.com> - 1.12.0-7

- x0vncserver: add new keysym in case we don't find matching keycode
  + actually apply the patch
  Resolves: bz#2119017