Bugzilla – Bug 1176733
VUL-0: CVE-2020-26117: tigervnc: certificate exceptions stored as authorities
Last modified: 2024-01-09 15:02:10 UTC
A security issue was discovered in tigernc related how the viewers handle TLS certificate exceptions. Tigervnc before 1.11.0 stored the certificates as authorities, meaning that the owner of that certificate could impersonate any server it wanted after a client had added an exception. Tigervnc 1.11.0 handles this properly by only storing exceptions for specific hostname/certificate combinations, as done by HTTP user agents or SSH. References: From https://github.com/TigerVNC/tigervnc/releases/tag/v1.11.0 https://github.com/TigerVNC/tigervnc/commit/b30f10c681ec87720cff85d490f67098568a9cba https://github.com/TigerVNC/tigervnc/commit/20dea801e747318525a5859fe4f37c52b05310cb
There was no comment with the need info, clearing. What do you need?
Ok. so no CRD since the fixes are already upstream? Although there is no CVE number updates are expected for sle and openSUSE and TW as usual, right?
Fixed in devel project and submitted for Tumbleweed.
This is an autogenerated message for OBS integration: This bug (1176733) was mentioned in https://build.opensuse.org/request/show/837392 Factory / tigervnc
Meanwhile I also have fixes for sle15-sp1 and sle15, but things are getting difficult with sle12-sp4, where Java is too old and Base64 module is missing. :-( [ 55s] /home/abuild/rpmbuild/BUILD/tigervnc-1.6.0/java/com/tigervnc/rfb/CSecurityTLS.java:44: error: cannot find symbol [ 55s] import java.util.Base64; [ 55s] ^ [ 55s] symbol: class Base64 [ 55s] location: package java.util
I believe you must use DatatypeConverter.printBase64Binary() instead of Base64.getEncoder().encodeToString(). Let me check...
sle15/sle15-sp1 with CVE: https://build.suse.de/request/show/228084 https://build.suse.de/request/show/228083
SUSE-SU-2020:2881-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): tigervnc-1.6.0-22.17.1 SUSE OpenStack Cloud 9 (src): tigervnc-1.6.0-22.17.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): tigervnc-1.6.0-22.17.1 SUSE Linux Enterprise Server 12-SP5 (src): tigervnc-1.6.0-22.17.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): tigervnc-1.6.0-22.17.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2020:2882-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: SUSE Linux Enterprise Server for SAP 15 (src): tigervnc-1.8.0-13.14.1 SUSE Linux Enterprise Server 15-LTSS (src): tigervnc-1.8.0-13.14.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): tigervnc-1.8.0-13.14.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): tigervnc-1.8.0-13.14.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2020:2880-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): tigervnc-1.9.0-19.9.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): tigervnc-1.9.0-19.9.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): tigervnc-1.9.0-19.9.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): tigervnc-1.9.0-19.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2020:1666-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: openSUSE Leap 15.2 (src): tigervnc-1.9.0-lp152.7.3.1
SUSE-SU-2020:2898-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 8 (src): tigervnc-1.6.0-27.1 SUSE OpenStack Cloud 8 (src): tigervnc-1.6.0-27.1 SUSE OpenStack Cloud 7 (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): tigervnc-1.6.0-27.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): tigervnc-1.6.0-27.1 SUSE Enterprise Storage 5 (src): tigervnc-1.6.0-27.1 HPE Helion Openstack 8 (src): tigervnc-1.6.0-27.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Released.
openSUSE-SU-2020:1841-1: An update that fixes one vulnerability is now available. Category: security (critical) Bug References: 1176733 CVE References: CVE-2020-26117 JIRA References: Sources used: openSUSE Leap 15.1 (src): tigervnc-1.9.0-lp151.4.9.1