File _patchinfo of Package patchinfo.20718
<patchinfo incident="20718">
<issue tracker="bnc" id="1024268">VUL-1: CVE-2017-5885: gtk-vnc,gtk-vnc2: Integer overflow when processing SetColorMapEntries</issue>
<issue tracker="bnc" id="1024266">VUL-1: CVE-2017-5884: gtk-vnc,gtk-vnc2: Improper check of framebuffer boundaries when processing a tile</issue>
<issue tracker="bnc" id="1188292">virt-manager crashes when opening a guest console</issue>
<issue tracker="bnc" id="1046782">vinagre coredump when trying to connect xvnc server which didn't open the firewall port</issue>
<issue tracker="cve" id="2017-5884"/>
<issue tracker="cve" id="2017-5885"/>
<packager>mgorse</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for gtk-vnc</summary>
<description>This update for gtk-vnc fixes the following issues:
- CVE-2017-5885: Correctly validate color map range indexes (bsc#1024268).
- CVE-2017-5884: Fix bounds checking for RRE, hextile & copyrect encodings (bsc#1024266).
- Fix crash when opening connection from a GSocketAddress (bsc#1046782).
- Fix possible crash on connection failure (bsc#1188292).
</description>
</patchinfo>