gpp_maybe Security update for libvncserver

slessp4-LibVNCServer-13927

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension (bsc#1120114) - CVE-2018-6307: Fixed use-after-free in file transfer extension server code (bsc#1120115) - CVE-2018-20020: Fixed heap out-of-bound write inside structure in VNC client code (bsc#1120116) - CVE-2018-15127: Fixed heap out-of-bounds write in rfbserver.c (bsc#1120117) - CVE-2018-20019: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1120118) - CVE-2018-20022: Fixed information disclosure through improper initialization in VNC client code (bsc#1120120) - CVE-2018-20024: Fixed NULL pointer dereference in VNC client code (bsc#1120121) - CVE-2018-20021: Fixed infinite loop in VNC client code (bsc#1120122)

• Release Date
  Jan 11 2019
• References
  Bugzilla: 1120120, 1120121, 1120122, 1120118, 1120115, 1120114, 1120117, 1120116
  CVEs: CVE-2018-20024, CVE-2018-6307, CVE-2018-15127, CVE-2018-15126, CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-20019
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-160.6.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-160.6.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-160.6.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-160.6.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  LibVNCServer
  VNC Development Library

  0.9.1-160.6.1 lock rpm lock src