[ol7_optional_latest] tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch

The Java TigerVNC viewer applet for web browsers. Install this package to allow
clients to use web browser when connect to the TigerVNC server.

Changelog (Show File list) (Show related packages)

• Mon Apr 29 2024 Codrin Pruteanu <codrin.pruteanu@oracle.com> - 1.8.0-33.0.1

  - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch,
    xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch,
    xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch,
    xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch,
    xorg-CVE-2024-31083-followup.patch

• Thu Apr 04 2024 Jan Grulich <jgrulich@redhat.com> - 1.8.0-33

  - Fix crash caused by fix for CVE-2024-31083
    Resolves: RHEL-30976

• Thu Apr 04 2024 Jan Grulich <jgrulich@redhat.com> - 1.8.0-32

  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-31006
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30976
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30993

• Thu Jan 25 2024 Jan Grulich <jgrulich@redhat.com> - 1.8.0-31

  - Fix use after free related to CVE-2024-21886
    Resolves: RHEL-20436
  - Fix copy/paste error in the DeviceStateNotify
    Resolves: RHEL-20587

• Fri Jan 19 2024 Jan Grulich <jgrulich@redhat.com> - 1.8.0-30

  - Don't try to get pointer position when the pointer becomes a floating device
    Resolves: RHEL-20436

• Fri Jan 12 2024 Jan Grulich <jgrulich@redhat.com> - 1.8.0-29

  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20436
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20427
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20587
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21212

• Wed Dec 13 2023 Jan Grulich <jgrulich@redhat.com> - 1.8.0-28

  - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18415

• Fri Dec 08 2023 Jan Grulich <jgrulich@redhat.com> - 1.8.0-27

  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18415
  - CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18427

• Wed Nov 01 2023 Jan Grulich <jgrulich@redhat.com> - 1.8.0-26

  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15235
  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15223

• Mon Mar 27 2023 Jan Grulich <jgrulich@redhat.com> - 1.8.0-25

  - CVE fix for: CVE-2023-1393
    Resolves: bz#2180291