Debian/tigervnc: high 8.1
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certi
Action: Upgrade tigervnc to 1.10.1+dfsg-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.1+dfsg-9 | - |
Fixed versions
| 1.10.1+dfsg-9 |
Sources
published · modified · JSON