RHSA-2024:3261: Important: tigervnc security update
Important: tigervnc security update
Other sources
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.Security Fix(es): xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080) xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081) xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3261?
The severity of RHSA-2024:3261 is classified as Important.
How do I fix RHSA-2024:3261?
To fix RHSA-2024:3261, ensure you update the tigervnc package to version 1.13.1-10.el8_10.
Which products are affected by RHSA-2024:3261?
The affected products by RHSA-2024:3261 include various versions of Red Hat Enterprise Linux for x86_64, Power, IBM z Systems, and ARM architectures.
What vulnerabilities does RHSA-2024:3261 address?
RHSA-2024:3261 addresses security vulnerabilities in the tigervnc remote display system.
Is there a specific version I need to upgrade to for RHSA-2024:3261?
Yes, you must upgrade to tigervnc version 1.13.1-10.el8_10 for RHSA-2024:3261.