{"id":"SUSE-SU-2015:0939-1","summary":"Security update for tigervnc, fltk","details":"tigervnc and fltk were updated to fix security issues and non-security bugs.\n\nThis security issue was fixed:\n- CVE-2015-0255: Information leak in the XkbSetGeometry request of X servers (bnc#915810).\n\nThese non-security issues were fixed:\n- vncviewer-tigervnc does not display mouse cursor shape changes (bnc#908738).\n- vnc module for Xorg fails to load on startup, module mismatch (bnc#911577).\n- An Xvnc session may become unusable when user logs out (bnc#920969)\n\nfltk was updated to fix one non-security issue:\n- vncviewer-tigervnc does not display mouse cursor shape changes (bnc#908738).\n\nAdditionally tigervnc was updated to 1.4.1, the contained X server was updated to to 1.15.2.\n","modified":"2026-02-04T03:47:47.298737Z","published":"2015-05-19T16:58:01Z","related":["CVE-2015-0255"],"upstream":["CVE-2015-0255"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150939-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/908738"},{"type":"REPORT","url":"https://bugzilla.suse.com/911577"},{"type":"REPORT","url":"https://bugzilla.suse.com/915782"},{"type":"REPORT","url":"https://bugzilla.suse.com/915810"},{"type":"REPORT","url":"https://bugzilla.suse.com/920969"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0255"}],"affected":[{"package":{"name":"fltk","ecosystem":"SUSE:Linux Enterprise Desktop 12","purl":"pkg:rpm/suse/fltk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}],"ecosystem_specific":{"binaries":[{"libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1","xorg-x11-Xvnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"tigervnc","ecosystem":"SUSE:Linux Enterprise Desktop 12","purl":"pkg:rpm/suse/tigervnc&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}],"ecosystem_specific":{"binaries":[{"libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1","xorg-x11-Xvnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"fltk","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","purl":"pkg:rpm/suse/fltk&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}],"ecosystem_specific":{"binaries":[{"fltk-devel-static":"1.3.2-10.2","fltk-devel":"1.3.2-10.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"fltk","ecosystem":"SUSE:Linux Enterprise Server 12","purl":"pkg:rpm/suse/fltk&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}],"ecosystem_specific":{"binaries":[{"libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1","xorg-x11-Xvnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"tigervnc","ecosystem":"SUSE:Linux Enterprise Server 12","purl":"pkg:rpm/suse/tigervnc&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-Xvnc":"1.4.1-32.1","libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"fltk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","purl":"pkg:rpm/suse/fltk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-10.2"}]}],"ecosystem_specific":{"binaries":[{"libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1","xorg-x11-Xvnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}},{"package":{"name":"tigervnc","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","purl":"pkg:rpm/suse/tigervnc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-32.1"}]}],"ecosystem_specific":{"binaries":[{"libfltk1":"1.3.2-10.2","tigervnc":"1.4.1-32.1","xorg-x11-Xvnc":"1.4.1-32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0939-1.json"}}],"schema_version":"1.7.3"}