Synopsis:          Important: libvncserver security update
Advisory ID:       SLSA-2020:0913-1
Issue Date:        2020-03-23
CVE Numbers:       None
--

Security Fix(es):

* libvncserver: HandleCursorShape() integer overflow resulting in
heap-based buffer overflow (CVE-2019-15690)
--

SL7
  x86_64
    libvncserver-0.9.9-14.el7_7.i686.rpm
    libvncserver-0.9.9-14.el7_7.x86_64.rpm
    libvncserver-debuginfo-0.9.9-14.el7_7.i686.rpm
    libvncserver-debuginfo-0.9.9-14.el7_7.x86_64.rpm
    libvncserver-devel-0.9.9-14.el7_7.i686.rpm
    libvncserver-devel-0.9.9-14.el7_7.x86_64.rpm

- Scientific Linux Development Team