ALSA-2024:2298

Dashboard / Vulnerabilities / ALSA-2024:2298

ALSA-2024:2298

Summary: Important: tigervnc security update

Details: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574) * xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References: https://access.redhat.com/errata/RHSA-2024:2298, https://access.redhat.com/security/cve/CVE-2023-5380, https://access.redhat.com/security/cve/CVE-2023-5574, https://bugzilla.redhat.com/2244735, https://bugzilla.redhat.com/2244736, https://errata.almalinux.org/9/ALSA-2024-2298.html