SUSE-SU-2019:13952-1

Details

Description of the patch:

This update for LibVNCServer fixes the following issues:

Security issues fixed:

CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123828)
CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123832)
CVE-2018-20748: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1123823)

Affected Packages

LibVNCServer-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

0:0.9.1-160.9.1

LibVNCServer

SUSE Linux Enterprise Point of Sale 11 SP3

Fixed in:

0:0.9.1-160.9.1

References

ADVISORY

https://bugzilla.suse.com/1123823

ADVISORY

https://bugzilla.suse.com/1123828

ADVISORY