Issued:
2013-10-22
Updated:
2013-10-22

RHSA-2013:1452 - Security Advisory

Synopsis

Moderate: vino security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated vino packages that fix one security issue are now available for Red
Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Vino is a Virtual Network Computing (VNC) server for GNOME. It allows
remote users to connect to a running GNOME session using VNC.

A denial of service flaw was found in the way Vino handled certain
authenticated requests from clients that were in the deferred state. A
remote attacker could use this flaw to make the vino-server process enter
an infinite loop when processing those incoming requests. (CVE-2013-5745)

All vino users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. The GNOME session must be
restarted (log out, then log back in) for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.4 i386
  • Red Hat Enterprise Linux Server - AUS 6.4 x86_64
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.4 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.4 ppc64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.4 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.4 i386
  • Red Hat Gluster Storage Server for On-premise 2.1 x86_64
  • Red Hat Storage for Public Cloud (via RHUI) 2.1 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

  • BZ - 910082 - CVE-2013-5745 vino: denial of service flaw

Red Hat Enterprise Linux Server 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux Server 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
x86_64
vino-2.13.5-10.el5_10.x86_64.rpm SHA-256: 358b4880690d2c3bf91b933f9abd0800034d68eb69429e932e026019a3d85e89
vino-debuginfo-2.13.5-10.el5_10.x86_64.rpm SHA-256: 10ea437aa76eb40d8706d32e1f2cc2394aeae60e3ee4ac5dbf2ee0447de8f993
ia64
vino-2.13.5-10.el5_10.ia64.rpm SHA-256: 8f9c1e6092c6d86e5d850f159d9d91be1f0a214e3933c7a53d039459e4591fb1
vino-debuginfo-2.13.5-10.el5_10.ia64.rpm SHA-256: 33acca59739cef3411b6e13fb85546647226d1997f1e78424dccc184f3080821
i386
vino-2.13.5-10.el5_10.i386.rpm SHA-256: 9e235c437e7a2376c7cfbac736b2da2626e6fe6e65a15ffaf993c61b6f9307d6
vino-debuginfo-2.13.5-10.el5_10.i386.rpm SHA-256: 0fa2e0732c9cd96a71b35f7e193c09ae0df3f1f990f174dab69c386df389d6be

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.4

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux Workstation 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux Workstation 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
x86_64
vino-2.13.5-10.el5_10.x86_64.rpm SHA-256: 358b4880690d2c3bf91b933f9abd0800034d68eb69429e932e026019a3d85e89
vino-debuginfo-2.13.5-10.el5_10.x86_64.rpm SHA-256: 10ea437aa76eb40d8706d32e1f2cc2394aeae60e3ee4ac5dbf2ee0447de8f993
i386
vino-2.13.5-10.el5_10.i386.rpm SHA-256: 9e235c437e7a2376c7cfbac736b2da2626e6fe6e65a15ffaf993c61b6f9307d6
vino-debuginfo-2.13.5-10.el5_10.i386.rpm SHA-256: 0fa2e0732c9cd96a71b35f7e193c09ae0df3f1f990f174dab69c386df389d6be

Red Hat Enterprise Linux Desktop 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux Desktop 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
x86_64
vino-2.13.5-10.el5_10.x86_64.rpm SHA-256: 358b4880690d2c3bf91b933f9abd0800034d68eb69429e932e026019a3d85e89
vino-debuginfo-2.13.5-10.el5_10.x86_64.rpm SHA-256: 10ea437aa76eb40d8706d32e1f2cc2394aeae60e3ee4ac5dbf2ee0447de8f993
i386
vino-2.13.5-10.el5_10.i386.rpm SHA-256: 9e235c437e7a2376c7cfbac736b2da2626e6fe6e65a15ffaf993c61b6f9307d6
vino-debuginfo-2.13.5-10.el5_10.i386.rpm SHA-256: 0fa2e0732c9cd96a71b35f7e193c09ae0df3f1f990f174dab69c386df389d6be

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
s390x
vino-2.28.1-9.el6_4.s390x.rpm SHA-256: eeebdf99520a058f5771ebec36b62ae5b833b4df2f068f2d68f01de5038cb2b1
vino-debuginfo-2.28.1-9.el6_4.s390x.rpm SHA-256: b9e0d5627d9b7023a9d110c3206fb4e57abf0e1e9d30fb9b0eb2492a8ad09184

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.4

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
s390x
vino-2.28.1-9.el6_4.s390x.rpm SHA-256: eeebdf99520a058f5771ebec36b62ae5b833b4df2f068f2d68f01de5038cb2b1
vino-debuginfo-2.28.1-9.el6_4.s390x.rpm SHA-256: b9e0d5627d9b7023a9d110c3206fb4e57abf0e1e9d30fb9b0eb2492a8ad09184

Red Hat Enterprise Linux for Power, big endian 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
ppc
vino-2.13.5-10.el5_10.ppc.rpm SHA-256: cb8fb76e70d4c8427ed7061fb3edbdbb3a172891940def37933f52385723ed9b
vino-debuginfo-2.13.5-10.el5_10.ppc.rpm SHA-256: aeb736e9b6e3cce103f3cf7b1d8b2cf3e56fec4895682fe86aa813e29384d7a2

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.4

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
ppc64
vino-2.28.1-9.el6_4.ppc64.rpm SHA-256: de432362d4de14704ce939f1d07b57656bd516bb9b1d980221e9fc6f413556d5
vino-debuginfo-2.28.1-9.el6_4.ppc64.rpm SHA-256: afe7a731e103a05e61a197646cda38822d458af33bbfb567901d882d351fb92c

Red Hat Enterprise Linux Server from RHUI 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux Server from RHUI 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
x86_64
vino-2.13.5-10.el5_10.x86_64.rpm SHA-256: 358b4880690d2c3bf91b933f9abd0800034d68eb69429e932e026019a3d85e89
vino-debuginfo-2.13.5-10.el5_10.x86_64.rpm SHA-256: 10ea437aa76eb40d8706d32e1f2cc2394aeae60e3ee4ac5dbf2ee0447de8f993
i386
vino-2.13.5-10.el5_10.i386.rpm SHA-256: 9e235c437e7a2376c7cfbac736b2da2626e6fe6e65a15ffaf993c61b6f9307d6
vino-debuginfo-2.13.5-10.el5_10.i386.rpm SHA-256: 0fa2e0732c9cd96a71b35f7e193c09ae0df3f1f990f174dab69c386df389d6be

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.4

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Gluster Storage Server for On-premise 2.1

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d

Red Hat Storage for Public Cloud (via RHUI) 2.1

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d

Red Hat Enterprise Linux Server - AUS 6.4

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
x86_64
vino-2.28.1-9.el6_4.x86_64.rpm SHA-256: 093f79e8600811d7797a4c31e2573aa300b9fe0375ae8b2ea703616c33a8d213
vino-debuginfo-2.28.1-9.el6_4.x86_64.rpm SHA-256: 997a60f47207852ef0d06c1c880c1a5a568f8fbc90e71fbd5112a7eebf61e16d
i386
vino-2.28.1-9.el6_4.i686.rpm SHA-256: e3dc47ff20e1f748fe1bc5019980951722bf5eb271e677c3558e24a8283b534d
vino-debuginfo-2.28.1-9.el6_4.i686.rpm SHA-256: 2516254131a05de367ffa80502fe56c8697fc15b222b807e46201e0edd2d5cc7

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
vino-2.13.5-10.el5_10.src.rpm SHA-256: 422ff09f058420bf5a5c32639505afc637c5a06d0289a21be8ff806a0e3cfba6
s390x
vino-2.13.5-10.el5_10.s390x.rpm SHA-256: d3db9ddc26490b458139da2d6093f5ee6f1d213506c67aacf1dba7a828ba6293
vino-debuginfo-2.13.5-10.el5_10.s390x.rpm SHA-256: cee5a29e6ec7dbb70e9a17409ebff8f61eaf334d033963bf0fb201b9bc85442f

Red Hat Enterprise Linux for Power, big endian 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
ppc64
vino-2.28.1-9.el6_4.ppc64.rpm SHA-256: de432362d4de14704ce939f1d07b57656bd516bb9b1d980221e9fc6f413556d5
vino-debuginfo-2.28.1-9.el6_4.ppc64.rpm SHA-256: afe7a731e103a05e61a197646cda38822d458af33bbfb567901d882d351fb92c

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
vino-2.28.1-9.el6_4.src.rpm SHA-256: 692132f68de83699446a12350ded825a284017946151ffda111a14e4c7558920
s390x
vino-2.28.1-9.el6_4.s390x.rpm SHA-256: eeebdf99520a058f5771ebec36b62ae5b833b4df2f068f2d68f01de5038cb2b1
vino-debuginfo-2.28.1-9.el6_4.s390x.rpm SHA-256: b9e0d5627d9b7023a9d110c3206fb4e57abf0e1e9d30fb9b0eb2492a8ad09184

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.