SUSE-SU-2020:2880-1
Security update for tigervnc
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (bsc#1176733)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | libXvnc-devel, libXvnc1, tigervnc and 3 more | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | libXvnc-devel, libXvnc1, tigervnc and 3 more | 1.9.0-19.9.1 |
Show all 12 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.1 | libXvnc-devel | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.1 | libXvnc1 | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.1 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.1 | xorg-x11-Xvnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.1 | xorg-x11-Xvnc-module | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.1 | xorg-x11-Xvnc-novnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | libXvnc-devel | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | libXvnc1 | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | xorg-x11-Xvnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | xorg-x11-Xvnc-module | 1.9.0-19.9.1 |
| SUSE Linux Enterprise 15.2 | xorg-x11-Xvnc-novnc | 1.9.0-19.9.1 |