——————————————————————————–
Fedora Update Notification
FEDORA-2014-11541
2014-09-26 08:11:18
——————————————————————————–

Name : libvncserver
Product : Fedora 19
Version : 0.9.10
Release : 0.6.20140718git9453be42.fc19
URL : http://libvncserver.sourceforge.net/
Summary : Library to make writing a vnc server easy
Description :
LibVNCServer makes writing a VNC server (or more correctly, a program
exporting a framebuffer via the Remote Frame Buffer protocol) easy.

It hides the programmer from the tedious task of managing clients and
compression schemata.

——————————————————————————–
Update Information:

Various security fixes, including CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055
——————————————————————————–
ChangeLog:

* Thu Sep 25 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.6.20140718git9453be42
– Security fixes (#1145878) …
– CVE-2014-6051 (#1144287)
– CVE-2014-6052 (#1144288)
– CVE-2014-6053 (#1144289)
– CVE-2014-6054 (#1144291)
– CVE-2014-6055 (#1144293)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.9.10-0.5.20140718git9453be42
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Aug 3 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.4.20140718git9453be42
– 20140718git9453be42 snapshot
* Sun Aug 3 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.3.20140405git646f844f
– include krfb patches (upstream pull request #16)
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.9.10-0.2.20140405git646f844f
– Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Apr 29 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.1.20140405git646f844f
– Update to the latest git commit 646f844 (#1092245)
* Mon Mar 31 2014 Rex Dieter <rdieter@fedoraproject.org> 0.9.9-11
– x11vnc crash when client connect (#972618)
pull in some upstream commits that may help
* Sat Dec 21 2013 Rex Dieter <rdieter@fedoraproject.org> – 0.9.9-10
– include additional dependencies for x11vnc (#864947)
– %build: –disable-silent-rules
– cleanup spec, drop support for old rpm (el5)
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> – 0.9.9-9
– Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue Jul 23 2013 Rex Dieter <rdieter@fedoraproject.org> 0.9.9-8
– Automagic dependencies, explitictly build –with-gcrypt –with-png (#852660)
——————————————————————————–
References:

[ 1 ] Bug #1144287 – CVE-2014-6051 libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling
https://bugzilla.redhat.com/show_bug.cgi?id=1144287
[ 2 ] Bug #1144288 – CVE-2014-6052 libvncserver: NULL pointer dereference flaw in framebuffer setup
https://bugzilla.redhat.com/show_bug.cgi?id=1144288
[ 3 ] Bug #1144289 – CVE-2014-6053 CVE-2010-5304 vnc and libvncserver: server NULL pointer dereference flaw in ClientCutText message handling
https://bugzilla.redhat.com/show_bug.cgi?id=1144289
[ 4 ] Bug #1144291 – CVE-2014-6054 libvncserver: server divide-by-zero flaw in scaling factor handling
https://bugzilla.redhat.com/show_bug.cgi?id=1144291
[ 5 ] Bug #1144293 – CVE-2014-6055 libvncserver: server stacked-based buffer overflow flaws in file transfer handling
https://bugzilla.redhat.com/show_bug.cgi?id=1144293
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libvncserver’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce