Bug Fix Advisory vnc bug fix update

Advisory: RHBA-2008:0685-4
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2008-07-24
Last updated on: 2008-07-24
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
OVAL: N/A

Details

Updated vnc packages that fix several bugs are now available.

The Virtual Network Computing (VNC) system allows users to access the same
desktop from a wide variety of platforms. These packages include the vnc
client, vnc, and the Xvnc server, vnc-server.

These updated packages fix the following bugs:

* in certain situations, when one or more clients were connected to the
Xvnc server, the Xvnc server ignored keyboard and mouse inputs.

* the Xvnc server could crash if it processed a malformed PCF file.

* the "SProcShmCreatePixmap()" function failed to byte-swap "pid". This
caused problems for certain clients, when the client and server were
running on different endian architectures. An error such as "BadIDChoice
(invalid resource ID chosen for this connection)" may have occurred. As
well, this bug may have caused some programs using Xvnc to crash.

Users of vnc and vnc-server are advised to upgrade to these updated
packages, which resolve these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

Red Hat Desktop (v. 4)

SRPMS:
vnc-4.0-12.el4.src.rpm     4c146882bff40a01bfcf95ad6e782c00
 
IA-32:
vnc-4.0-12.el4.i386.rpm     5e000197b13cada914ed8603a57149bc
vnc-server-4.0-12.el4.i386.rpm     ba213fa196baa9480460abee7f5e602b
 
x86_64:
vnc-4.0-12.el4.x86_64.rpm     225d5e45fef4a711f3f4dc50332f3c91
vnc-server-4.0-12.el4.x86_64.rpm     a4db7d53f7a20f4887cdd96485faf63f
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
vnc-4.0-12.el4.src.rpm     4c146882bff40a01bfcf95ad6e782c00
 
IA-32:
vnc-4.0-12.el4.i386.rpm     5e000197b13cada914ed8603a57149bc
vnc-server-4.0-12.el4.i386.rpm     ba213fa196baa9480460abee7f5e602b
 
IA-64:
vnc-4.0-12.el4.ia64.rpm     6d5717dfe0b7edc0c6fba5eedd8b5c5b
vnc-server-4.0-12.el4.ia64.rpm     b7aae8ba6cd483dd3ad1c8ca526e5403
 
PPC:
vnc-4.0-12.el4.ppc.rpm     84e71065e541e2528275a1a52199a434
vnc-server-4.0-12.el4.ppc.rpm     aa100e0e3eca9fa94c94761cd3d60b79
 
s390:
vnc-4.0-12.el4.s390.rpm     b662cb3fc7f7a67ec2ad498e291611d7
vnc-server-4.0-12.el4.s390.rpm     be856f7a890ab151c85dcd391d996c8c
 
s390x:
vnc-4.0-12.el4.s390x.rpm     f251103fd8b3197ab48faf2ff7216231
vnc-server-4.0-12.el4.s390x.rpm     0fe20923b2905dfd35d222e56e924673
 
x86_64:
vnc-4.0-12.el4.x86_64.rpm     225d5e45fef4a711f3f4dc50332f3c91
vnc-server-4.0-12.el4.x86_64.rpm     a4db7d53f7a20f4887cdd96485faf63f
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
vnc-4.0-12.el4.src.rpm     4c146882bff40a01bfcf95ad6e782c00
 
IA-32:
vnc-4.0-12.el4.i386.rpm     5e000197b13cada914ed8603a57149bc
vnc-server-4.0-12.el4.i386.rpm     ba213fa196baa9480460abee7f5e602b
 
IA-64:
vnc-4.0-12.el4.ia64.rpm     6d5717dfe0b7edc0c6fba5eedd8b5c5b
vnc-server-4.0-12.el4.ia64.rpm     b7aae8ba6cd483dd3ad1c8ca526e5403
 
x86_64:
vnc-4.0-12.el4.x86_64.rpm     225d5e45fef4a711f3f4dc50332f3c91
vnc-server-4.0-12.el4.x86_64.rpm     a4db7d53f7a20f4887cdd96485faf63f
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
vnc-4.0-12.el4.src.rpm     4c146882bff40a01bfcf95ad6e782c00
 
IA-32:
vnc-4.0-12.el4.i386.rpm     5e000197b13cada914ed8603a57149bc
vnc-server-4.0-12.el4.i386.rpm     ba213fa196baa9480460abee7f5e602b
 
IA-64:
vnc-4.0-12.el4.ia64.rpm     6d5717dfe0b7edc0c6fba5eedd8b5c5b
vnc-server-4.0-12.el4.ia64.rpm     b7aae8ba6cd483dd3ad1c8ca526e5403
 
x86_64:
vnc-4.0-12.el4.x86_64.rpm     225d5e45fef4a711f3f4dc50332f3c91
vnc-server-4.0-12.el4.x86_64.rpm     a4db7d53f7a20f4887cdd96485faf63f
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

203172 - vncserver PCF handling Integer overflow
203673 - Xvnc: SProcShmCreatePixmap() fails to byte-swap 'pid'
86158 - ignoring keyboard and mouse inputs


Keywords

overflow, pcf, swap


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/