drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in LibVNCServer
Name: |
Mehrere Probleme in LibVNCServer |
|
ID: |
FEDORA-2014-11537 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 20 |
|
Datum: |
Mo, 29. September 2014, 07:09 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6051
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6052
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6055 |
|
Applikationen: |
LibVNCServer |
|
Originalnachricht |
Name : libvncserver Product : Fedora 20 Version : 0.9.10 Release : 0.6.20140718git9453be42.fc20 URL : http://libvncserver.sourceforge.net/ Summary : Library to make writing a vnc server easy Description : LibVNCServer makes writing a VNC server (or more correctly, a program exporting a framebuffer via the Remote Frame Buffer protocol) easy.
It hides the programmer from the tedious task of managing clients and compression schemata.
------------------------------------------------------------------------------- - Update Information:
Various security fixes, including CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055 ------------------------------------------------------------------------------- - ChangeLog:
* Thu Sep 25 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.6.20140718git9453be42 - Security fixes (#1145878) ... - CVE-2014-6051 (#1144287) - CVE-2014-6052 (#1144288) - CVE-2014-6053 (#1144289) - CVE-2014-6054 (#1144291) - CVE-2014-6055 (#1144293) * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.10-0.5.20140718git9453be42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Aug 3 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.4.20140718git9453be42 - 20140718git9453be42 snapshot * Sun Aug 3 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.3.20140405git646f844f - include krfb patches (upstream pull request #16) * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.10-0.2.20140405git646f844f - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue Apr 29 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.1.20140405git646f844f - Update to the latest git commit 646f844 (#1092245) * Mon Mar 31 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.9-11 - x11vnc crash when client connect (#972618) pull in some upstream commits that may help * Sat Dec 21 2013 Rex Dieter <rdieter@fedoraproject.org> - 0.9.9-10 - include additional dependencies for x11vnc (#864947) - %build: --disable-silent-rules - cleanup spec, drop support for old rpm (el5) ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #1144287 - CVE-2014-6051 libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling https://bugzilla.redhat.com/show_bug.cgi?id=1144287 [ 2 ] Bug #1144288 - CVE-2014-6052 libvncserver: NULL pointer dereference flaw in framebuffer setup https://bugzilla.redhat.com/show_bug.cgi?id=1144288 [ 3 ] Bug #1144289 - CVE-2014-6053 CVE-2010-5304 vnc and libvncserver: server NULL pointer dereference flaw in ClientCutText message handling https://bugzilla.redhat.com/show_bug.cgi?id=1144289 [ 4 ] Bug #1144291 - CVE-2014-6054 libvncserver: server divide-by-zero flaw in scaling factor handling https://bugzilla.redhat.com/show_bug.cgi?id=1144291 [ 5 ] Bug #1144293 - CVE-2014-6055 libvncserver: server stacked-based buffer overflow flaws in file transfer handling https://bugzilla.redhat.com/show_bug.cgi?id=1144293 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update libvncserver' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|