tigervnc-1.3.1-3.el7

Virtual Network Computing (VNC) is a remote display system which
allows you to view a computing 'desktop' environment not only on the
machine where it is running, but from anywhere on the Internet and
from a wide variety of machine architectures. This package contains a
client which will allow you to connect to other desktops running a VNC
server.

Security issues fixed with this release:

CVE-2014-8240
Integer overflow in TigerVNC allows remote VNC servers to cause a
denial of service (crash) and possibly execute arbitrary code via
vectors related to screen size handling, which triggers a heap-based
buffer overflow, a similar issue to CVE-2014-6051.
CVE-2014-8241
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Fixed bugs:

* The position of the mouse cursor in the VNC session was not correctly communicated to the VNC viewer, resulting in cursor misplacement. The method of displaying the remote cursor has been changed, and cursor movements on the VNC server are now accurately reflected on the VNC client.