Virtual Network Computing (VNC) is a remote display system which allows
users to view a computing desktop environment not only on the machine where
it is running, but from anywhere on the Internet and from a wide variety of
machine architectures. TigerVNC is a suite of VNC servers and clients.
The tigervnc packages contain a client which allows users to connect to
other desktops running a VNC server.
An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way TigerVNC handled screen sizes. A malicious VNC server
could use this flaw to cause a client to crash or, potentially, execute
arbitrary code on the client. (CVE-2014-8240)
A NULL pointer dereference flaw was found in TigerVNC’s XRegion.
A malicious VNC server could use this flaw to cause a client to crash.
(CVE-2014-8241)
The tigervnc packages have been upgraded to upstream version 1.3.1, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1199453)
This update also fixes the following bug:
All tigervnc users are advised to upgrade to these updated packages, which
correct these issues and add these enhancements.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | ppc64 | tigervnc-server | < 1.3.1-3.el7 | tigervnc-server-1.3.1-3.el7.ppc64.rpm |
RedHat | 7 | aarch64 | tigervnc-server | < 1.3.1-3.el7 | tigervnc-server-1.3.1-3.el7.aarch64.rpm |
RedHat | 7 | aarch64 | tigervnc | < 1.3.1-3.el7 | tigervnc-1.3.1-3.el7.aarch64.rpm |
RedHat | 7 | ppc64 | tigervnc | < 1.3.1-3.el7 | tigervnc-1.3.1-3.el7.ppc64.rpm |
RedHat | 7 | x86_64 | tigervnc | < 1.3.1-3.el7 | tigervnc-1.3.1-3.el7.x86_64.rpm |
RedHat | 7 | ppc64 | tigervnc-server-minimal | < 1.3.1-3.el7 | tigervnc-server-minimal-1.3.1-3.el7.ppc64.rpm |
RedHat | 7 | ppc64le | tigervnc-server | < 1.3.1-3.el7 | tigervnc-server-1.3.1-3.el7.ppc64le.rpm |
RedHat | 7 | x86_64 | tigervnc-debuginfo | < 1.3.1-3.el7 | tigervnc-debuginfo-1.3.1-3.el7.x86_64.rpm |
RedHat | 7 | noarch | tigervnc-server-applet | < 1.3.1-3.el7 | tigervnc-server-applet-1.3.1-3.el7.noarch.rpm |
RedHat | 7 | ppc64le | tigervnc | < 1.3.1-3.el7 | tigervnc-1.3.1-3.el7.ppc64le.rpm |