FEDORA-2023-52460bedda
Packages in this update:
tigervnc-1.13.1-9.fc39
xorg-x11-server-1.20.14-28.fc39
Update description:
CVE fix for: CVE-2023-6377, CVE-2023-6478
tigervnc-1.13.1-9.fc39
xorg-x11-server-1.20.14-28.fc39
CVE fix for: CVE-2023-6377, CVE-2023-6478
Zygmunt Krynicki discovered that GNOME Settings did not accurately reflect
the SSH remote login status when the system was configured to use systemd
socket activation for OpenSSH. Remote SSH access may be unknowingly
enabled, contrary to expectation.
Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.
Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server,
which may result in privilege escalation if the X server is running
privileged.