shield Security update for libvncserver

SUSE-SLE-SDK-12-2015-890

The LibVNCServer package was updated to fix the following security issues: - bsc#897031: fix several security issues: * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on client side. * CVE-2014-6052: Lack of malloc() return value checking on client side. * CVE-2014-6053: Server crash on a very large ClientCutText message. * CVE-2014-6054: Server crash when scaling factor is set to zero. * CVE-2014-6055: Multiple stack overflows in File Transfer feature. - bsc#854151: Restrict the SSL cipher suite.

• Release Date
  Dec 30 2015
• References
  Bugzilla: 854151, 897031
  CVEs: CVE-2014-6051, CVE-2014-6053, CVE-2014-6052, CVE-2014-6055, CVE-2014-6054
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12 s390x

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-16.1 lock src

  LibVNCServer-devel
  VNC Development Library

  0.9.9-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 ppc64le

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-16.1 lock src

  LibVNCServer-devel
  VNC Development Library

  0.9.9-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-16.1 lock src

  LibVNCServer-devel
  VNC Development Library

  0.9.9-16.1 lock rpm