gpp_maybe Security update for libvncserver

SUSE-SLE-SERVER-12-SP3-2019-60

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension (bsc#1120114) - CVE-2018-6307: Fixed use-after-free in file transfer extension server code (bsc#1120115) - CVE-2018-20020: Fixed heap out-of-bound write inside structure in VNC client code (bsc#1120116) - CVE-2018-15127: Fixed heap out-of-bounds write in rfbserver.c (bsc#1120117) - CVE-2018-20019: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1120118) - CVE-2018-20023: Fixed information disclosure through improper initialization in VNC Repeater client code (bsc#1120119) - CVE-2018-20022: Fixed information disclosure through improper initialization in VNC client code (bsc#1120120) - CVE-2018-20024: Fixed NULL pointer dereference in VNC client code (bsc#1120121) - CVE-2018-20021: Fixed infinite loop in VNC client code (bsc#1120122)

• Release Date
  Jan 10 2019
• References
  Bugzilla: 1120120, 1120121, 1120122, 1120119, 1120118, 1120115, 1120114, 1120117, 1120116
  CVEs: CVE-2018-20024, CVE-2018-6307, CVE-2018-15127, CVE-2018-15126, CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-20023, CVE-2018-20019
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.8.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.8.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.8.1 lock rpm

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.8.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.8.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.8.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.8.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.8.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.8.1 lock rpm

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.9-17.8.1 lock src

  libvncclient0
  Library implementing a VNC client

  0.9.9-17.8.1 lock rpm

  libvncserver0
  Library implementing a VNC server

  0.9.9-17.8.1 lock rpm