CVE-2016-9941 · cross-distro fix matrix

CVE-2016-9941: Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the client drawing area.

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2016-9941 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

libvncserver→ fixed in0.9.11+dfsg-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```
veyon→ fixed in4.1.4+repack1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y veyon
```

Source: Debian Security Tracker

libvncserver→ fixed in0.9.11+dfsg-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```
veyon→ fixed in4.1.4+repack1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y veyon
```

Source: Debian Security Tracker

libvncserver→ fixed in0.9.11+dfsg-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```
veyon→ fixed in4.1.4+repack1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y veyon
```