fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7

fltk
FLTK (pronounced "fulltick") is a cross-platform C GUI toolkit.
It provides modern GUI functionality without the bloat, and supports
3D graphics via OpenGL and its built-in GLUT emulation.

tigervnc
Virtual Network Computing (VNC) is a remote display system which
allows you to view a computing 'desktop' environment not only on the
machine where it is running, but from anywhere on the Internet and
from a wide variety of machine architectures. This package contains a
client which will allow you to connect to other desktops running a VNC
server.

CVE-2016-10207
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before
21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows
attackers to execute arbitrary code or cause a denial of service
(memory corruption) via unspecified vectors, a different vulnerability
than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,
CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027,
CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.
CVE-2017-5581
Buffer overflow in the ModifiablePixelBuffer::fillRect function in
TigerVNC before 1.7.1 allows remote servers to execute arbitrary code
via an RRE message with subrectangle outside framebuffer boundaries.
CVE-2017-7392
In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx
SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can
cause a small memory leak in the server.
CVE-2017-7393
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an
authenticated client can cause a double free, leading to denial of
service or potentially code execution.
CVE-2017-7394
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg),
unauthenticated users can crash the server by sending long usernames.
CVE-2017-7395
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by
causing an integer overflow, an authenticated client can crash the
server.
CVE-2017-7396
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an
unauthenticated client can cause a small memory leak in the server.