Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 949507 - <net-misc/turbovnc-3.1.4: affected by multiple vulnerabilities from xorg-server 21.1.x
Summary: <net-misc/turbovnc-3.1.4: affected by multiple vulnerabilities from xorg-serv...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://github.com/TurboVNC/turbovnc/...
Whiteboard: ~1 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-09 12:08 UTC by Viorel Munteanu
Modified: 2025-02-16 08:52 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Viorel Munteanu gentoo-dev 2025-02-09 12:08:05 UTC 
The TurboVNC Server now includes various security fixes (CVE-2023-5367, CVE-2023-6377, CVE-2023-6478, CVE-2023-6816, CVE-2024-0229, CVE-2024-0408, CVE-2024-9632, CVE-2024-21885, CVE-2024-21886, CVE-2024-31080, CVE-2024-31081, and CVE-2024-31083) from the xorg-server 21.1.x code base.
Comment 1 Larry the Git Cow gentoo-dev 2025-02-09 12:10:59 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=583780d60b40f97ce210f25947496cb6b9531d1b

commit 583780d60b40f97ce210f25947496cb6b9531d1b
Author:     Viorel Munteanu <ceamac@gentoo.org>
AuthorDate: 2025-02-09 11:59:02 +0000
Commit:     Viorel Munteanu <ceamac@gentoo.org>
CommitDate: 2025-02-09 12:10:52 +0000

    net-misc/turbovnc: add 3.1.4
    
    Bug: https://bugs.gentoo.org/949507
    Signed-off-by: Viorel Munteanu <ceamac@gentoo.org>

 net-misc/turbovnc/Manifest              |   2 +
 net-misc/turbovnc/turbovnc-3.1.4.ebuild | 147 ++++++++++++++++++++++++++++++++
 2 files changed, 149 insertions(+)
Comment 2 Hans de Graaff gentoo-dev Security 2025-02-16 08:52:22 UTC 
Thanks for fixing. Closing noglsa since this there are not stable keywords.