critical Security update for libvncserver

SUSE-SLE-SERVER-12-SP3-2019-313

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123828) - CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123832) - CVE-2018-20748: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1123823)

• Release Date
  Feb 9 2019
• References
  Bugzilla: 1123828, 1123832, 1123823
  CVEs: CVE-2018-20749, CVE-2018-20748, CVE-2018-20750
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.11.1

  lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.11.1

  lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.11.1

  lock rpm

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.11.1

  lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.11.1

  lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.11.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.11.1

  lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.11.1

  lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.11.1

  lock rpm

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.11.1

  lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.11.1

  lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.11.1

  lock rpm