gpp_maybe Security update for libvncserver

slessp4-LibVNCServer-12932

LibVNCServer was updated to fix two security issues. These security issues were fixed: - CVE-2016-9941: Heap-based buffer overflow in rfbproto.c allowed remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the client drawing area (bsc#1017711) - CVE-2016-9942: Heap-based buffer overflow in ultra.c allowed remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed length exceeds what is specified by the tile dimensions (bsc#1017712)

• Release Date
  Jan 11 2017
• References
  Bugzilla: 1017712, 1017711
  CVEs: CVE-2016-9942, CVE-2016-9941
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-159.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-159.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-159.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-159.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-159.1 lock rpm lock src