RHSA-2024:2080: Important: tigervnc security update
Important: tigervnc security update
Other sources
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.<br>Security Fix(es):<br><li> xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents</li> (CVE-2024-31080)<br><li> xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice</li> (CVE-2024-31081)<br><li> xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:2080?
The severity of RHSA-2024:2080 is classified as Important.
How do I fix RHSA-2024:2080?
You can fix RHSA-2024:2080 by updating to the tigervnc version 1.8.0-33.el7_9 or later.
Which software is affected by RHSA-2024:2080?
RHSA-2024:2080 affects various Red Hat Enterprise Linux products along with related tigervnc packages.
What vulnerabilities are addressed in RHSA-2024:2080?
RHSA-2024:2080 addresses security vulnerabilities that affect Virtual Network Computing (VNC) in tigervnc.
Is a reboot required after applying RHSA-2024:2080?
A reboot is not typically required after applying RHSA-2024:2080 unless specified by your system or application requirements.