Name        : libvncserver
Product     : Fedora 19
Version     : 0.9.10
Release     : 0.6.20140718git9453be42.fc19
URL         : http://libvncserver.sourceforge.net/
Summary     : Library to make writing a vnc server easy
Description :
LibVNCServer makes writing a VNC server (or more correctly, a program
exporting a framebuffer via the Remote Frame Buffer protocol) easy.

It hides the programmer from the tedious task of managing clients and
compression schemata.

-------------------------------------------------------------------------------
-
Update Information:

Various security fixes, including CVE-2014-6051, CVE-2014-6052, CVE-2014-6053,
 CVE-2014-6054, CVE-2014-6055
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu Sep 25 2014 Rex Dieter <rdieter@fedoraproject.org>
 0.9.10-0.6.20140718git9453be42
- Security fixes (#1145878) ...
- CVE-2014-6051 (#1144287)
- CVE-2014-6052 (#1144288)
- CVE-2014-6053 (#1144289)
- CVE-2014-6054 (#1144291)
- CVE-2014-6055 (#1144293)
* Sun Aug 17 2014 Fedora Release Engineering
 <rel-eng@lists.fedoraproject.org> - 0.9.10-0.5.20140718git9453be42
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Aug  3 2014 Rex Dieter <rdieter@fedoraproject.org>
 0.9.10-0.4.20140718git9453be42
- 20140718git9453be42 snapshot
* Sun Aug  3 2014 Rex Dieter <rdieter@fedoraproject.org>
 0.9.10-0.3.20140405git646f844f
- include krfb patches (upstream pull request #16)
* Sat Jun  7 2014 Fedora Release Engineering
 <rel-eng@lists.fedoraproject.org> - 0.9.10-0.2.20140405git646f844f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Apr 29 2014 Rex Dieter <rdieter@fedoraproject.org>
 0.9.10-0.1.20140405git646f844f
- Update to the latest git commit 646f844 (#1092245)
* Mon Mar 31 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.9-11
- x11vnc crash when client connect (#972618)
  pull in some upstream commits that may help
* Sat Dec 21 2013 Rex Dieter <rdieter@fedoraproject.org> - 0.9.9-10
- include additional dependencies for x11vnc (#864947)
- %build: --disable-silent-rules
- cleanup spec, drop support for old rpm (el5)
* Sat Aug  3 2013 Fedora Release Engineering
 <rel-eng@lists.fedoraproject.org> - 0.9.9-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 23 2013 Rex Dieter <rdieter@fedoraproject.org> 0.9.9-8
- Automagic dependencies, explitictly build --with-gcrypt --with-png (#852660)
-------------------------------------------------------------------------------
-
References:

  [ 1 ] Bug #1144287 - CVE-2014-6051 libvncserver: integer overflow flaw,
 leading to a heap-based buffer overflow in screen size handling
        https://bugzilla.redhat.com/show_bug.cgi?id=1144287
  [ 2 ] Bug #1144288 - CVE-2014-6052 libvncserver: NULL pointer dereference
 flaw in framebuffer setup
        https://bugzilla.redhat.com/show_bug.cgi?id=1144288
  [ 3 ] Bug #1144289 - CVE-2014-6053 CVE-2010-5304 vnc and libvncserver: server
 NULL pointer dereference flaw in ClientCutText message handling
        https://bugzilla.redhat.com/show_bug.cgi?id=1144289
  [ 4 ] Bug #1144291 - CVE-2014-6054 libvncserver: server divide-by-zero flaw
 in scaling factor handling
        https://bugzilla.redhat.com/show_bug.cgi?id=1144291
  [ 5 ] Bug #1144293 - CVE-2014-6055 libvncserver: server stacked-based buffer
 overflow flaws in file transfer handling
        https://bugzilla.redhat.com/show_bug.cgi?id=1144293
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program.  Use
su -c 'yum update libvncserver' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce