USN-3171-1: LibVNCServer vulnerabilities
11 January 2017
Several security issues were fixed in LibVNCServer.
- libvncserver - vnc server library
Josef Gajdusek discovered that the LibVNCServer client library incorrectly
handled certain FrameBufferUpdate messages. If a user were tricked into
connecting to a malicious server, an attacker could use this issue to cause
a denial of service, or possibly execute arbitrary code. (CVE-2016-9941,
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-4587-1: italc-master, italc-management-console, italc, libitalccore, italc-client