gpp_maybe Security update for libvncserver

SUSE-SLE-SAP-12-SP2-2020-1165

This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441).

• Release Date
  May 4 2020
• References
  Bugzilla: 1155419, 1170441, 1160471
  CVEs: CVE-2019-15690, CVE-2019-15681, CVE-2019-20788
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.19.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.19.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.19.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.19.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.19.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.19.1 lock rpm